CVE-2004-1059

{"id": "CVE-2004-1059", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-10T05:00:00.000", "references": [{"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mikx.de/index.php?p=6", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mnogosearch.org/history.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11895", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18434", "source": "cve@mitre.org"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mikx.de/index.php?p=6", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mnogosearch.org/history.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/11895", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18434", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms."}], "lastModified": "2024-11-20T23:49:59.793", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.1.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E0B5216-258D-4BBA-B913-165CB40778D1"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8634099-098D-4EFE-BC5F-D27ED33B1DFB"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E28A4BE-4345-45E0-954C-A6A38E99C1E8"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07F268F1-379F-4462-86EC-F2161249E23F"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "630B6DAB-787C-49E7-AD48-3CF7AB372541"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC0B97DE-941B-468A-8B32-424C6B6CCA73"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B8A5A71-CC7A-441D-88EB-E75476EB5139"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6405908-8877-4DC2-BA98-42FFEF6D3562"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C16498CA-04E6-4B90-8E3D-7042B7658A30"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2BEAA1B-6000-4F4F-8078-A92B3A4F88C4"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F01BBF30-C067-4EFD-B729-626DBEE0A83B"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DF71593-0430-4DBE-A148-ACE0323EB390"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01E1E277-DF1C-4E34-85C8-32D11D12BA14"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFCBB03D-169C-4076-B392-92053D669FDF"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FDF2F47-A2F3-4DEF-A672-1FA9AD86007C"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43ABF9A1-430F-41CB-AA26-2BC02DF3FD62"}, {"criteria": "cpe:2.3:a:mnogosearch:mnogosearch:3.2.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "898CAFB1-1871-4EDB-A4D6-B49BA29F851E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}