Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-2210
CVE-2004-2210
Description
Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp.
Affected products
1- cpe:2.3:a:express-web:express-web_content_management_system:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.maxpatrol.com/advdetails.aspnvdExploitVendor Advisory
- www.maxpatrol.com/mp_advisory.aspnvd
- www.securityfocus.com/bid/11426nvd
News mentions
0No linked articles in our index yet.