CVE-2004-2017
CVE-2004-2017
Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header in a GET request to ttt-in, (3) the Referer header in a GET request to ttt-in, or the (4) site name or (5) site URL fields in the main control panel.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/24122unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://marc.info/?l=bugtraq&m=108481571131866&w=2http://secunia.com/advisories/11623https://exchange.xforce.ibmcloud.com/vulnerabilities/16164http://www.icefire.org/security/ttt-bugreport.txthttp://www.osvdb.org/6339http://www.osvdb.org/6340http://www.osvdb.org/6341http://www.osvdb.org/6342http://www.osvdb.org/6343http://www.osvdb.org/6344http://www.securityfocus.com/bid/10359