CVE-2004-0305

Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows...

6.8 MediumPublic exploit

CVE-2004-0305 is a medium vulnerability (CVSS 6.8) in Webcortex Webstores 2000, published March 18, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.

Exploit likelihood

1.99%Up 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2004-0305
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2004-0305
Updated: 2026-11-02

EUVDEUVD-2004-0305 No score

Record: EUVD-2004-0305
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qfm9-fxw9-qx37 No score

Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows...

Record: GHSA-qfm9-fxw9-qx37
Updated: 2026-11-02

Affected products

webcortex webstores 2000

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	WebCortex WebStores2000 - 'error.asp' Cross-Site Scripting	2004-02-18

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD