Back
CVE-2004-0358
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed parameter during the newslogo_upload action in admin.php.
Published: Nov 23, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (4)
| Vendor | Product | Version |
|---|---|---|
| virtuasystems | virtuanews_pro | 1.0 |
| virtuasystems | virtuanews_pro | 1.0.1 |
| virtuasystems | virtuanews_pro | 1.0.2 |
| virtuasystems | virtuanews_pro | 1.0.3 |
GitHub Security Advisory GHSA-cwr5-qr66-jg4j
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote...
References (10)
- http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html Exploit
- http://marc.info/?l=bugtraq&m=107851556116088&w=2
- http://www.securityfocus.com/bid/9812 Exploit
- http://www.securityfocus.com/bid/9819 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15402
- http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html Exploit
- http://marc.info/?l=bugtraq&m=107851556116088&w=2
- http://www.securityfocus.com/bid/9812 Exploit
- http://www.securityfocus.com/bid/9819 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15402
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
4.22%
Top 10% most likely to be exploited
Threat Score
28.5 / 100
Data Sources
NVD
EPSS
GitHub