PT-2004-2111

CVE-2004-1146

·

Published

2004-12-31

·

Updated

2017-07-11

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: CVSTrac versions prior to 1.1.5
Description: The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities are located in the main.c and login.c files, allowing remote attackers to inject arbitrary HTML and web script.
Recommendations: For versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2004-1146
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com