← Database

CVE-2004-0305

MEDIUM CVSS: 6.8 Published: 2004-11-23 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.

Affected Platforms

Webcortex Webstores 2000

Weakness Type

NVD-CWE-Other

References