CVE-2004-1640

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-08-28 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.

References

http://cyruxnet.org/modulo_dic_xoops.htm
http://marc.info/?l=bugtraq&m=109394077209963&w=2
http://secunia.com/advisories/12424
http://www.osvdb.org/9393
http://www.osvdb.org/9394
http://www.securityfocus.com/bid/11064
https://exchange.xforce.ibmcloud.com/vulnerabilities/17152
https://exchange.xforce.ibmcloud.com/vulnerabilities/17154
http://cyruxnet.org/modulo_dic_xoops.htm
http://marc.info/?l=bugtraq&m=109394077209963&w=2
http://secunia.com/advisories/12424
http://www.osvdb.org/9393

Get alerted when CVE-2004-1640 or the next vulnerability affects your stack