Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-1420
CVE-2004-1420
Description
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.
Affected products
3Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- secunia.com/advisories/13673nvdPatch
- www.whmautopilot.com/forum/lofiversion/index.php/t6785.htmlnvdPatchVendor Advisory
- www.gulftech.orgnvdExploit
- www.securityfocus.com/bid/12119nvdExploit
- marc.infonvd
- marc.infonvd
- exchange.xforce.ibmcloud.com/vulnerabilities/18700nvd
News mentions
0No linked articles in our index yet.