CVE-2004-2735 in P4DB
Zusammenfassung
von VulDB • 07.06.2026
Eine Cross-Site-Scripting-(XSS)-Schwachstelle in P4DB 2.01 und früheren Versionen ermöglicht es entfernten Angreifern, beliebige Webscripts oder HTML über folgende Parameter einzufügen: (1) SET_PREFERENCES in SetPreferences.cgi; (2) BRANCH in branchView.cgi; (3) FSPC sowie (4) COMPLETE in changeByUsers.cgi; (5) FSPC, (6) LABEL, (7) EXLABEL, (8) STATUS, (9) MAXCH, (10) FIRSTCH, (11) CHOFFSETDISP, (12) SEARCHDESC, (13) SEARCH_INVERT, (14) USER, (15) GROUP und (16) CLIENT in changeList.cgi; (17) CH in changeView.cgi; (18) USER in clientList.cgi; (19) CLIENT in clientView.cgi; (20) FSPC in depotTreeBrowser.cgi; (21) FSPC in depotStats.cgi; (22) FSPC, (23) REV, (24) ACT, (25) FSPC2, (26) REV2, (27) CH und (28) CONTEXT in fileDiffView.cgi; (29) FSPC sowie (30) REV in fileDownLoad.cgi; (31) FSPC, (32) LISTLAB und (33) SHOWBRANCH in fileLogView.cgi; (34) FSPC sowie (35) LABEL in fileSearch.cgi; (36) FSPC, (37) REV und (38) FORCE in fileViewer.cgi; (39) FSPC in filesChangedSince.cgi; (40) GROUP in groupView.cgi; (41) TYPE, (42) FSPC und (43) REV in htmlFileView.cgi; (44) CMD in javaDataView.cgi; (45) JOBVIEW sowie (46) FLD in jobList.cgi; (47) JOB in jobView.cgi; (48) LABEL1 sowie (49) LABEL2 in labelDiffView.cgi; (50) LABEL in labelView.cgi; (51) FSPC in searchPattern.cgi; (52) TYPE, (53) FSPC und (54) REV in specialFileView.cgi; (55) GROUPSONLY in userList.cgi oder (56) USER in userView.cgi.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.