Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2162

Description

Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tutos/Tutos2 versions
cpe:2.3:a:tutos:tutos:1.1_2004-04-14:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tutos:tutos:1.1_2004-04-14:*:*:*:*:*:*:*
- (no CPE)range: =1.1

Patches

Vulnerability mechanics

References

secunia.com/advisories/12606/nvdPatchVendor Advisory
www.securityfocus.com/archive/1/375757nvdExploitVendor Advisory
cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.phpnvd
secunia.com/advisories/18954nvd
www.debian.org/security/2006/dsa-980nvd
www.securityfocus.com/bid/11221nvd
exchange.xforce.ibmcloud.com/vulnerabilities/17445nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000