CVE-2004-2725
Last modified
CVE-2004-2725 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.. EPSS estimates a 1.77% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Aztek Forum | Aztek Forum | 4.0 |
References
- http://secunia.com/advisories/13202Vendor Advisory
- http://secunia.com/advisories/13202Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-2725?
How severe is CVE-2004-2725?
How do I fix CVE-2004-2725?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-2719Buffer overflow in the UrlToLocal function in PunyLib.dll of…
- CVE-2004-2720Cross-site scripting (XSS) vulnerability in register.asp in …
- CVE-2004-2721The CheckGroup function in openSkat VTMF before 2.1 generate…
- CVE-2004-2722Nessus 2.0.10a stores account passwords in plaintext in .nes…
- CVE-2004-2723NessusWX 1.4.4 stores account passwords in plaintext in .ses…
- CVE-2004-2724LionMax Software Chat Anywhere 2.72a allows remote attackers…
- CVE-2004-2726HTTPMail service in MailEnable Professional 1.18 does not pr…
- CVE-2004-2727Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professi…
- CVE-2004-2728Buffer overflow in the FTP server of Hummingbird Connectivit…
- CVE-2004-2729Inetd32 Administration Tool of Hummingbird Connectivity 7.1 …
- CVE-2004-2730Sysinternals PsTools before 2.05, including (1) PsExec befor…
- CVE-2004-2731Multiple integer overflows in Sbus PROM driver (drivers/sbus…
Are you affected by CVE-2004-2725?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST