CVE-2004-1651
Last modified
CVE-2004-1651 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.. EPSS estimates a 1.34% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Brickhost | Phpscheduleit | 1.0_rc1 |
References
- http://www.securityfocus.com/bid/11080Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11080Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-1651?
How severe is CVE-2004-1651?
How do I fix CVE-2004-1651?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-1645Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows…
- CVE-2004-1646Directory traversal vulnerability in Xedus 1.0 allows remote…
- CVE-2004-1647SQL injection vulnerability in Password Protect allows remot…
- CVE-2004-1648Cross-site scripting (XSS) vulnerability in (1) index.asp, (…
- CVE-2004-1649Buffer overflow in Microsoft Msinfo32.exe might allow local …
- CVE-2004-1650D-Link DCS-900 Internet Camera listens on UDP port 62976 for…
- CVE-2004-1652phpScheduleIt 1.0.0 RC1 does not clear administrative privil…
- CVE-2004-1653The default configuration for OpenSSH enables AllowTcpForwar…
- CVE-2004-1654SQL injection vulnerability in the calendar module in phpWeb…
- CVE-2004-1655Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3…
- CVE-2004-1656CRLF injection vulnerability in Comersus Shopping Cart 5.099…
- CVE-2004-1657Cross-site scripting (XSS) vulnerability in the Activity and…
Are you affected by CVE-2004-1651?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST