{"id":"CVE-2004-1210","aliases":["EUVD-2004-1207","GHSA-g6wj-gf4p-jrxr"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other...","description":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0199,"percentile":0.80801,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-12-15T05:00:00Z","modified":"2026-06-16T22:07:15Z","exploits":[{"source":"exploitdb","id":"EDB-24792","title":"IPCop 1.4.1 - Web Administration Interface Proxy Log HTML Injection","type":"webapps","platform":"multiple","date":"2004-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/24792"}],"products":[{"vendor":"ipcop","product":"ipcop"}],"references":[{"url":"http://www.kurczaba.com/html/security/0411291.htm","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18301","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/11779","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://marc.info/?l=bugtraq\u0026m=110197682705001\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1210"},{"url":"https://github.com/advisories/GHSA-g6wj-gf4p-jrxr"}],"sources":{"cve":[{"id":"CVE-2004-1210","description":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","status":"published","published":"2004-12-15T05:00:00Z","modified":"2024-08-08T00:46:12.377Z","updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1207","description":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","status":"published","published":"2004-12-15T05:00:00Z","modified":"2024-08-08T00:46:12Z","updated_at":"2026-11-03T01:15:15.601329Z"}],"ghsa":[{"id":"GHSA-g6wj-gf4p-jrxr","title":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other...","description":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","status":"published","published":"2022-04-29T02:59:09Z","modified":"2023-01-30T05:03:23Z","updated_at":"2026-11-02T14:46:49.507262Z"}],"nvd":[{"id":"CVE-2004-1210","description":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","status":"published","published":"2005-01-10T05:00:00Z","modified":"2026-06-16T22:07:15.603Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}