QwikSec

Security Database

CVE

CWE

Training

CVE-2004-1318

Published: Jan 6, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab ("%09") character, which prevents the rest of the query from being properly sanitized.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_DEBIAN

third-party-advisory

x_refsource_SECUNIA

namazu-tab-query-xss(18623)

vdb-entry

x_refsource_XF

http://www.namazu.org/security.html.en#xss-tab

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

SUSE-SR:2005:001

vendor-advisory

x_refsource_SUSE

FEDORA-2004-557

vendor-advisory

x_refsource_FEDORA

http://jvn.jp/jp/JVN%23904429FE.html

x_refsource_MISC

vdb-entry

x_refsource_OSVDB

vendor-advisory

x_refsource_HP

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.