Unscored severity · published Dec 31, 2004
CVE-2004-2444
Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter
–
CVSS
4.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jaws · Jaws
0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2444
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2444
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html
Exploit
http://securitytracker.com/id?1010651
Exploit
http://www.osvdb.org/7723
Patch
http://www.securityfocus.com/bid/10670
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16621
More from Jaws
–
CVE-2009-0645
Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a
–
CVE-2006-3292
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata…
–
CVE-2005-3955
Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to…
–
CVE-2005-2179
PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter
–
CVE-2005-1231
Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term…