CVE-2004-1849

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=108006627005371&w=2
http://securitytracker.com/id?1009541Vendor Advisory
http://www.osvdb.org/4529Vendor Advisory
http://www.osvdb.org/4530Vendor Advisory
http://www.securityfocus.com/bid/9965Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15517
http://marc.info/?l=bugtraq&m=108006627005371&w=2
http://securitytracker.com/id?1009541Vendor Advisory
http://www.osvdb.org/4529Vendor Advisory
http://www.osvdb.org/4530Vendor Advisory
http://www.securityfocus.com/bid/9965Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15517

Timeline

Published: Mar 24, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-18505.0The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with the port and IP address CVE-2004-18517.5Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attacker CVE-2004-18525.0DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote atta CVE-2004-18535.0Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long ServerInfo variable CVE-2004-18547.5Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.CVE-2004-18555.0Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers to gain sensitive in CVE-2004-18565.0devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files CVE-2004-18572.1Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files v CVE-2004-18585.0HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly due to a stricmp() e CVE-2004-18595.0Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitra CVE-2004-18605.0Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of servic CVE-2004-18614.6Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords.