CVE-2004-2656

MEDIUM 4.3CVE-2004-2656 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2656 is a MEDIUM (CVSS 4.3) vulnerability affecting slashcode (open source development network).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
slashcode open_source_development_network	`= 2.2.5≤ r_2_5_0_41`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl.

References

archives.neohapsis.com/archives/bugtraq/2004-12/0170.html · Vendor Advisory
secunia.com/advisories/13491 · Patch
osvdb.org/21874 · Exploit
osvdb.org/21875 · Exploit
securityfocus.com/bid/11993 · Patch
slashcode.com/slash/04/12/20/1946225.shtml · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/18508

More vulnerabilities in slashcode

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

slashcode

open_source_development_network

= 2.2.5≤ r_2_5_0_41

No fix yet

More vulnerabilities in slashcode

See all →