CVE-2004-2725
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-2725
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Aztek Forum多个输入确认漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Aztek Forum 4.0版本存在多个跨站脚本(XSS)漏洞。远程攻击者可以借助（1）(a)search.php中的search参数，（2）(b)subscribe.php中的email参数，以及（3）(c) forum_2.php中的标题参数来注入任意web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-2725
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-2725
Please Login to view more intelligence information
Same Patch Batch · n/a · 2007-10-06 · 76 CVEs total
| CVE-2004-2694 | Microsoft Microsoft Outlook_Express权限许可和访问控制漏洞 | |
| CVE-2007-5241 | HP OpenVMS 'NET$CSMACD.EXE' 缓冲区溢出漏洞 | |
| CVE-2007-5250 | Americasarmy America's Army Special Forces Unreal engine 拒绝服务漏洞 | |
| CVE-2007-5249 | Americasarmy America's Army Special Forces Unreal engine中的注册函数缓冲区溢出漏洞 | |
| CVE-2007-5248 | id Software Doom 3 Engine Punkbuster 多重格式字符串漏洞 | |
| CVE-2007-5247 | Monolith Productions First Encounter Assault Recon 格式化字符串漏洞 | |
| CVE-2007-5246 | Borland InterBase和Firebird数据库多个远程栈缓冲区溢出漏洞 | |
| CVE-2007-5245 | Borland Firebird数据库多个远程栈缓冲区溢出漏洞 | |
| CVE-2007-5244 | Borland InterBase数据库多个远程栈缓冲区溢出漏洞 | |
| CVE-2007-5243 | Borland InterBase和Firebird数据库多个远程栈缓冲区溢出漏洞 | |
| CVE-2007-5251 | WebHost Automation Helm Web Hosting Control Panel 多个跨站请求伪造漏洞 | |
| CVE-2004-2693 | HP-UX权限许可和访问控制漏洞 | |
| CVE-2004-2692 | php-exec-dir补丁命令访问限制绕过漏洞 | |
| CVE-2004-2691 | 带防火墙3Com SuperStack 3 4400 switches拒绝服务漏洞 | |
| CVE-2004-2690 | NewsPHP Administration Pane文件上传不受限漏洞 | |
| CVE-2004-2689 | NewsPHP权限许可和访问控制漏洞 | |
| CVE-2004-2688 | newsPHP跨站脚本漏洞 | |
| CVE-2005-4871 | IBM DB2 XML函数文件建立漏洞 | |
| CVE-2005-4870 | IBM DB2 XML函数远程缓冲区溢出漏洞 | |
| CVE-2005-4869 | IBM DB2 to_char和to_date函数本地拒绝服务漏洞 |
Showing top 20 of 76 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2004-2725
No comments yet