EDB-24389

functional

Sympa 4.x - New List HTML Injection

view exploit source exploit_dbverifiedtype webappsauthor Jose Antoniopublished 2004-08-21catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-1735USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the descr…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan