CVE-2004-2725

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.

Affected products

Aztek Forum: 4.0

References

http://secunia.com/advisories/13202
http://securitytracker.com/id?1012213
http://www.osvdb.org/11704
http://www.osvdb.org/11705
http://www.osvdb.org/11706
http://www.securityfocus.com/bid/11654
https://exchange.xforce.ibmcloud.com/vulnerabilities/18057
http://secunia.com/advisories/13202
http://securitytracker.com/id?1012213
http://www.osvdb.org/11704
http://www.osvdb.org/11705
http://www.osvdb.org/11706

Get alerted when CVE-2004-2725 or the next vulnerability affects your stack