CVE-2004-0673 in SCI Photo Chat

Summary

Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 07/12/2004
• Disclosure: 08/06/2004
• Moderation: VulDB entry created
• Entries: VDB-22073 (1)
• CPE: ready
• CWE: CWE-80 (Confirmed)
• Exploit: Download
• CVSS: 6.3
• EPSS: 0.00726
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0673
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0673
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0673/