CVE-2004-2162

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.

Affected products

Tutos: 1.1_2004-04-14

References

http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php?r1=1.58&r2=1.59
http://secunia.com/advisories/12606/
http://secunia.com/advisories/18954
http://www.debian.org/security/2006/dsa-980
http://www.securityfocus.com/archive/1/375757
http://www.securityfocus.com/bid/11221
https://exchange.xforce.ibmcloud.com/vulnerabilities/17445
http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php?r1=1.58&r2=1.59
http://secunia.com/advisories/12606/
http://secunia.com/advisories/18954
http://www.debian.org/security/2006/dsa-980
http://www.securityfocus.com/archive/1/375757

Get alerted when CVE-2004-2162 or the next vulnerability affects your stack