CVE-2004-2603

medium

Description

Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/18696

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2594

http://www.securityfocus.com/bid/12105

http://www.osvdb.org/12597

http://www.gulftech.org/?node=research&article_id=00058-12242004

http://securitytracker.com/id?1012685

http://secunia.com/advisories/13652

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N