CVE-2004-2670

Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module.

• http://echo.or.id/adv/adv02-y3dips-2004.txtExploit, Vendor Advisory
• http://secunia.com/advisories/12231Vendor Advisory
• http://securitytracker.com/id?1010864Vendor Advisory
• http://www.securityfocus.com/archive/1/370855Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/10856Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/8506Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13041
• http://echo.or.id/adv/adv02-y3dips-2004.txtExploit, Vendor Advisory
• http://secunia.com/advisories/12231Vendor Advisory
• http://securitytracker.com/id?1010864Vendor Advisory
• http://www.securityfocus.com/archive/1/370855Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/10856Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/8506Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13041

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2664John Lim ADOdb Library for PHP before 4.23 allows remote att…
• CVE-2004-2665Unspecified vulnerability in the Address and Routing Paramet…
• CVE-2004-2666Mantis before 20041016 provides a complete Issue History (Bu…
• CVE-2004-2667Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0…
• CVE-2004-2668SQL injection vulnerability in Interchange before 4.8.9 allo…
• CVE-2004-2669Multiple SQL injection vulnerabilities in Land Down Under (L…
• CVE-2004-2671mod.php in eNdonesia 8.3 allows remote attackers to obtain s…
• CVE-2004-2672Unspecified vulnerability in ArGoSoft FTP server before 1.4.…
• CVE-2004-2673Multiple buffer overflows in ArGoSoft FTP Server before 1.4.…
• CVE-2004-2674Directory traversal vulnerability in ArGoSoft FTP Server bef…
• CVE-2004-2675ArGoSoft FTP Server before 1.4.1.6 allows remote authenticat…
• CVE-2004-2676The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in We…