CVE Vulnerabilities

CVE-2004-1837

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings.

Affected Software

Name Vendor Start Version End Version
Mod_survey Joel_palmius 3.0.0 3.0.0
Mod_survey Joel_palmius 3.0.1 3.0.1
Mod_survey Joel_palmius 3.0.2 3.0.2
Mod_survey Joel_palmius 3.0.3 3.0.3
Mod_survey Joel_palmius 3.0.4 3.0.4
Mod_survey Joel_palmius 3.0.5 3.0.5
Mod_survey Joel_palmius 3.0.6 3.0.6
Mod_survey Joel_palmius 3.0.9 3.0.9
Mod_survey Joel_palmius 3.0.10 3.0.10
Mod_survey Joel_palmius 3.0.11 3.0.11
Mod_survey Joel_palmius 3.0.12 3.0.12
Mod_survey Joel_palmius 3.0.13 3.0.13
Mod_survey Joel_palmius 3.0.14 3.0.14
Mod_survey Joel_palmius 3.0.14d 3.0.14d
Mod_survey Joel_palmius 3.0.14e 3.0.14e
Mod_survey Joel_palmius 3.0.15 3.0.15
Mod_survey Joel_palmius 3.0.15_pre1 3.0.15_pre1
Mod_survey Joel_palmius 3.0.15_pre2 3.0.15_pre2
Mod_survey Joel_palmius 3.0.15_pre3 3.0.15_pre3
Mod_survey Joel_palmius 3.0.15_pre4 3.0.15_pre4
Mod_survey Joel_palmius 3.0.15_pre5 3.0.15_pre5
Mod_survey Joel_palmius 3.0.15_pre6 3.0.15_pre6
Mod_survey Joel_palmius 3.0.16_pre1 3.0.16_pre1
Mod_survey Joel_palmius 3.2.0_pre1 3.2.0_pre1
Mod_survey Joel_palmius 3.2.0_pre2 3.2.0_pre2
Mod_survey Joel_palmius 3.2.0_pre3 3.2.0_pre3

References