{"api_version":"1","generated_at":"2026-07-23T08:47:08+00:00","cve":"CVE-2004-1210","urls":{"html":"https://cve.report/CVE-2004-1210","api":"https://cve.report/api/cve/CVE-2004-1210.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-1210","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-1210"},"summary":{"title":"CVE-2004-1210","description":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-01-10 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/11779","name":"http://www.securityfocus.com/bid/11779","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"IPCop Web Administration Interface Proxy Log HTML Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=110197682705001&w=2","name":"http://marc.info/?l=bugtraq&m=110197682705001&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18301","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18301","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kurczaba.com/html/security/0411291.htm","name":"http://www.kurczaba.com/html/security/0411291.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in \"proxylog.dat\"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1210","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1210","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"1210","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ipcop","cpe5":"ipcop","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T00:46:12.377Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.kurczaba.com/html/security/0411291.htm"},{"name":"ipcop-proxylogdat-xss(18301)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18301"},{"name":"11779","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/11779"},{"name":"20041201 [KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in proxylog.dat","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=110197682705001&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-12-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.kurczaba.com/html/security/0411291.htm"},{"name":"ipcop-proxylogdat-xss(18301)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18301"},{"name":"11779","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/11779"},{"name":"20041201 [KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in proxylog.dat","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=110197682705001&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-1210","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.kurczaba.com/html/security/0411291.htm","refsource":"MISC","url":"http://www.kurczaba.com/html/security/0411291.htm"},{"name":"ipcop-proxylogdat-xss(18301)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18301"},{"name":"11779","refsource":"BID","url":"http://www.securityfocus.com/bid/11779"},{"name":"20041201 [KA Advisory 0411291] IPCop Cross Site Scripting Vulnerability in proxylog.dat","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=110197682705001&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-1210","datePublished":"2004-12-15T05:00:00.000Z","dateReserved":"2004-12-14T00:00:00.000Z","dateUpdated":"2024-08-08T00:46:12.377Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-01-10 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED06B358-E0EF-4E4F-848A-E720ABA78633"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"1210","Ordinal":"1","Title":"CVE-2004-1210","CVE":"CVE-2004-1210","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"1210","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.","Type":"Description","Title":"CVE-2004-1210"},{"CveYear":"2004","CveId":"1210","Ordinal":"2","NoteData":"2004-12-15","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"1210","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}