Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbi…

published 2004-09-01 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-1651

cvss: 4.3; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.8%; EPSS 1.8% chance of exploitation in 30 days, percentile 78%
public exploits: 1; Exploit-DB

Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.

Patch / fix

links 2

secunia.com/advisories/12416 advisory
securityfocus.com/bid/11086 advisory

Timeline

2004-09-01 First public exploit (EDB-24424)
2004-09-01 Published

Exploit prediction

1.79% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-24424 Newtelligence DasBlog 1.x - Request Log HTML Injection webapps, 2004-09-01
secunia.com http://secunia.com/advisories/12416 referenced PoC, tagged "exploit" by a source, unverified
securityfocus.com http://www.securityfocus.com/bid/11086 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:N/I:P/A:N

References

secunia.com /advisories/12416
third-party-advisory, exploit, patch, vendor-advisory
securityfocus.com /bid/11086
vdb-entry, exploit, patch, vendor-advisory
staff.newtelligence.net /clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198
vendor-advisory
exchange.xforce.ibmcloud.com /vulnerabilities/17174
vdb-entry
marc.info /?l=bugtraq&m=109443321830050&w=2
mailing-list

Sources

CVE List CVE-2004-1657
NVD CVE-2004-1657

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary