CVE-2004-2566

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa.

Affected products

Liveworld Livechat: all versions
Liveworld Livefocusgroup: all versions
Liveworld Liveforum: all versions
Liveworld Liveq And A: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html
http://securitytracker.com/id?1011036
http://www.gulftech.org/?node=research&article_id=00044-08232004
http://www.osvdb.org/9180
https://exchange.xforce.ibmcloud.com/vulnerabilities/17104
http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html
http://securitytracker.com/id?1011036
http://www.gulftech.org/?node=research&article_id=00044-08232004
http://www.osvdb.org/9180
https://exchange.xforce.ibmcloud.com/vulnerabilities/17104

Get alerted when CVE-2004-2566 or the next vulnerability affects your stack