CVE-2004-2735 in P4DB
Riassunto
di VulDB • 29/06/2026
Una vulnerabilità di cross-site scripting (XSS) in P4DB 2.01 e versioni precedenti consente ad attaccanti remoti di iniettare script web o HTML arbitrari tramite i seguenti parametri: (1) SET_PREFERENCES in SetPreferences.cgi; (2) BRANCH in branchView.cgi; (3) FSPC e (4) COMPLETE in changeByUsers.cgi; (5) FSPC, (6) LABEL, (7) EXLABEL, (8) STATUS, (9) MAXCH, (10) FIRSTCH, (11) CHOFFSETDISP, (12) SEARCHDESC, (13) SEARCH_INVERT, (14) USER, (15) GROUP e (16) CLIENT in changeList.cgi; (17) CH in changeView.cgi; (18) USER in clientList.cgi; (19) CLIENT in clientView.cgi; (20) FSPC in depotTreeBrowser.cgi; (21) FSPC in depotStats.cgi; (22) FSPC, (23) REV, (24) ACT, (25) FSPC2, (26) REV2, (27) CH e (28) CONTEXT in fileDiffView.cgi; (29) FSPC e (30) REV in fileDownLoad.cgi; (31) FSPC, (32) LISTLAB e (33) SHOWBRANCH in fileLogView.cgi; (34) FSPC e (35) LABEL in fileSearch.cgi; (36) FSPC, (37) REV e (38) FORCE in fileViewer.cgi; (39) FSPC in filesChangedSince.cgi; (40) GROUP in groupView.cgi; (41) TYPE, (42) FSPC e (43) REV in htmlFileView.cgi; (44) CMD in javaDataView.cgi; (45) JOBVIEW e (46) FLD in jobList.cgi; (47) JOB in jobView.cgi; (48) LABEL1 e (49) LABEL2 in labelDiffView.cgi; (50) LABEL in labelView.cgi; (51) FSPC in searchPattern.cgi; (52) TYPE, (53) FSPC e (54) REV in specialFileView.cgi; (55) GROUPSONLY in userList.cgi; oppure (56) USER in userView.cgi.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.