CVE-2004-1657

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-09-01 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.

Affected products

Newtelligence Dasblog: 1.3, 1.4, 1.5, 1.6

References

http://marc.info/?l=bugtraq&m=109443321830050&w=2
http://secunia.com/advisories/12416
http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198
http://www.securityfocus.com/bid/11086
https://exchange.xforce.ibmcloud.com/vulnerabilities/17174
http://marc.info/?l=bugtraq&m=109443321830050&w=2
http://secunia.com/advisories/12416
http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198
http://www.securityfocus.com/bid/11086
https://exchange.xforce.ibmcloud.com/vulnerabilities/17174

Get alerted when CVE-2004-1657 or the next vulnerability affects your stack