Skip to content
High Published: Jul 30, 2004 Modified: Apr 03, 2025

CVE-2004-1703

8.8 CVSS Score High
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Export CVE-2004-1703 Data:
Share:
Link copied!

Description

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.

CVSS Vector Details

Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Affected Software Configurations

  • a fusionphp fusion_news 3.6.1 * * * * * * *

Weaknesses (CWE)

  • CWE-352

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2002-2426 CVSS 0 Same weakness: CWE-352 CVE-2004-1967 CVSS 8.8 Same weakness: CWE-352 CVE-2004-1842 CVSS 8.8 Same weakness: CWE-352 CVE-2004-1995 CVSS 6.5 Same weakness: CWE-352 CVE-2005-1674 CVSS 6.5 Same weakness: CWE-352

CVE History Timeline

May 31, 2005 16:28 Initial Analysis
Oct 18, 2016 02:59 CVE Modified
Jul 11, 2017 01:31 CVE Modified
Feb 08, 2024 20:46 Modified Analysis
May 14, 2024 01:26 CVE Modified
Nov 20, 2024 23:51 CVE Modified
← Back to CVE Tracker