CVE-2004-1512

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.

Affected products

Soft3304 04Webserver: 1.42

References

http://marc.info/?l=bugtraq&m=110012542615484&w=2
http://marc.info/?l=bugtraq&m=110054395311823&w=2
http://secunia.com/advisories/13159/
http://www.security.org.sg/vuln/04webserver142.html
http://www.securityfocus.com/bid/11652
http://www.soft3304.net/04WebServer/Security.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18033
http://marc.info/?l=bugtraq&m=110012542615484&w=2
http://marc.info/?l=bugtraq&m=110054395311823&w=2
http://secunia.com/advisories/13159/
http://www.security.org.sg/vuln/04webserver142.html
http://www.securityfocus.com/bid/11652

Get alerted when CVE-2004-1512 or the next vulnerability affects your stack