CVE-2004-2670
Public Exploits 1
ExploitDB · 1 EDB-24348 [webapps]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-2670
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
eNdonesia Search Form跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
eNdonesia 8.3版本的mod.php存在多个跨站脚本（XSS）漏洞。远程攻击者借助(1)viewcat操作中的mod参数或者(2)publisher模块的search操作中的query参数注入任意web脚本或者HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-2670
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-2670
请登录查看更多情报信息。
Vendor Advisories for CVE-2004-2670 (6)
Other References for CVE-2004-2670 (1)
- http://echo.or.id/adv/adv02-y3dips-2004.txtx_refsource_MISC
Same Patch Batch · n/a · 2007-01-05 · 52 CVEs total
| CVE-2007-0085 | OpenBSD 'vga_pci.c'权限提升漏洞 | |
| CVE-2007-0059 | Apple Quicktime HREF Track(HREFTrack)跨站脚本攻击漏洞 | |
| CVE-2006-6870 | Avahi Compressed 'avahi-core/dns.c'DNS拒绝服务漏洞 | |
| CVE-2006-6876 | OpenSER SMS处理模块缓冲区溢出漏洞 | |
| CVE-2006-6879 | PHP-Update Admin 'Upload.PHP'任意文件上载漏洞 | |
| CVE-2006-6878 | PHP-Update 'Upload.PHP'rights[7]参数任意文件上载漏洞 | |
| CVE-2006-6877 | Matteo Lucarelli 3editor CMS 'index.php'目录遍历漏洞 | |
| CVE-2006-6880 | PHP-Update 'Guestadd.PHP'多个SQL注入漏洞 | |
| CVE-2003-1317 | eNdonesia Mod参数跨站脚本攻击（XSS）漏洞 | |
| CVE-2003-1316 | eNdonesia Mod参数路径泄露漏洞 | |
| CVE-2004-2671 | eNdonesia Mod参数路径披露漏洞 | |
| CVE-2007-0084 | Windows NT Message Compiler MC 缓冲区溢出漏洞 | |
| CVE-2007-0083 | Nuked Klan 远程Cookie破解漏洞 | |
| CVE-2007-0082 | IMGallery 'Start.PHP' 任意文件上传漏洞 | |
| CVE-2007-0081 | Kerio可注入伪造iphlpapi DLL漏洞 | |
| CVE-2007-0080 | FreeRadius SMB_Connect_Server函数缓冲区溢出漏洞 | |
| CVE-2007-0079 | rblog 'admin.mdb'和'rblog.mdb' 访问控制漏洞 | |
| CVE-2007-0078 | BattleBlog 'blankmaster.mdb'权限许可和访问控制漏洞 | |
| CVE-2007-0077 | lblog 'admin/db/newFolder/'密码破解漏洞 | |
| CVE-2007-0076 | Openforum 'openforum.mdb'权限许可和访问控制漏洞 |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-9604
JeecgBoot AiragModelController access control - CVE-2026-9581
JeecgBoot add access control - CVE-2026-9580
JeecgBoot selectDepart LoginController.selectDepart access c - CVE-2026-9579
JeecgBoot SysUser userEdit user.getUsername access control - CVE-2026-9572
GPAC MP4Box media.c Media_GetSample memory leak
V. Comments for CVE-2004-2670
No comments yet