CVE-2003-0404

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

• http://marc.info/?l=bugtraq&m=105406028027360&w=2
• http://www.iss.net/security_center/static/12071.phpVendor Advisory
• http://www.s21sec.com/es/avisos/s21sec-023-en.txtVendor Advisory
• http://www.securityfocus.com/bid/7687Exploit, Patch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=105406028027360&w=2
• http://www.iss.net/security_center/static/12071.phpVendor Advisory
• http://www.s21sec.com/es/avisos/s21sec-023-en.txtVendor Advisory
• http://www.securityfocus.com/bid/7687Exploit, Patch, Vendor Advisory

Published

Jun 30, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0398Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with…
• CVE-2003-0399Vignette StoryServer 4 and 5, Vignette V/5, and possibly oth…
• CVE-2003-0400Vignette StoryServer and Vignette V/5 does not properly calc…
• CVE-2003-0401Vignette StoryServer and Vignette V/5 allows remote attacker…
• CVE-2003-0402The default login template (/vgn/login) in Vignette StorySer…
• CVE-2003-0403Vignette StoryServer 5 and Vignette V/5 allows remote attack…
• CVE-2003-0405Vignette StoryServer 5 and Vignette V/6 allows remote attack…
• CVE-2003-0406PalmVNC 1.40 and earlier stores passwords in plaintext in th…
• CVE-2003-0407Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 a…
• CVE-2003-0408Buffer overflow in Uptime Client (UpClient) 5.0b7, and possi…
• CVE-2003-0409Buffer overflow in BRS WebWeaver 1.04 and earlier allows rem…
• CVE-2003-0410Buffer overflow in AnalogX Proxy 4.13 allows remote attacker…