Unscored severity · published Sep 1, 2004
CVE-2004-1657
Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Dasblog · Newtelligence
1.3; 1.4; 1.5; 1.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1657
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1657
marc.info
http://marc.info/?l=bugtraq&m=109443321830050&w=2
Exploit
http://secunia.com/advisories/12416
Vendor Advisory
http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198
Exploit
http://www.securityfocus.com/bid/11086
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17174
More from Dasblog
–
CVE-2014-7292
Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to…