CVE-2004-2084

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-02-07 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter.

Affected products

Jshop E-Commerce Jshop Professional: 3.0, 3.1, 3.2, 3.3, 3.4
Jshop E-Commerce Jshop Server: 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0, 1.2.0

References

http://secunia.com/advisories/10825
http://securitytracker.com/id?1008988
http://www.osvdb.org/3889
http://www.securityfocus.com/bid/9609
http://www.systemsecure.org/advisories/ssadvisory09022004.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/15100
http://secunia.com/advisories/10825
http://securitytracker.com/id?1008988
http://www.osvdb.org/3889
http://www.securityfocus.com/bid/9609
http://www.systemsecure.org/advisories/ssadvisory09022004.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/15100

Get alerted when CVE-2004-2084 or the next vulnerability affects your stack