{"id":"CVE-2004-2351","aliases":["EUVD-2004-2343","GHSA-249c-j5p3-pjx6"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to...","description":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the \u003cscript\u003e and \u003cstyle\u003e tags, which are filtered by PHP-Nuke.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01255,"percentile":0.697,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:29Z","products":[{"vendor":"martin_bauer","product":"gbook"}],"references":[{"url":"http://www.securityfocus.com/archive/1/352373","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15027","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1008930","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/9559","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2351"},{"url":"https://github.com/advisories/GHSA-249c-j5p3-pjx6"}],"sources":{"cve":[{"id":"CVE-2004-2351","description":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the \u003cscript\u003e and \u003cstyle\u003e tags, which are filtered by PHP-Nuke.","status":"published","published":"2005-08-16T04:00:00Z","modified":"2024-08-08T01:22:13.712Z","updated_at":"2026-11-02T14:34:53.70484Z"}],"euvd":[{"id":"EUVD-2004-2343","description":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the \u003cscript\u003e and \u003cstyle\u003e tags, which are filtered by PHP-Nuke.","status":"published","published":"2005-08-16T04:00:00Z","modified":"2024-08-08T01:22:13Z","updated_at":"2026-11-03T01:15:10.882227Z"}],"ghsa":[{"id":"GHSA-249c-j5p3-pjx6","title":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to...","description":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the \u003cscript\u003e and \u003cstyle\u003e tags, which are filtered by PHP-Nuke.","status":"published","published":"2022-04-29T03:01:17Z","modified":"2023-01-30T05:04:05Z","updated_at":"2026-11-02T14:46:58.413117Z"}],"nvd":[{"id":"CVE-2004-2351","description":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the \u003cscript\u003e and \u003cstyle\u003e tags, which are filtered by PHP-Nuke.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:29.703Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:52.459805Z"}]}}