CVE-2004-0046

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' (double quote) character.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published: Feb 3, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-00474.6Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain priv CVE-2004-00496.8Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to th CVE-2004-00505.0Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web CVE-2004-00517.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no CVE-2004-00527.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no CVE-2004-00537.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fi CVE-2004-00547.5Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of CVE-2004-00555.0The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segment CVE-2004-00567.5Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP CVE-2004-00575.0The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a deni CVE-2004-00582.1Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_ant CVE-2004-00595.0Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary