Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2004-2198 1 Duware 1 Duclassmate 2026-04-16 N/A
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.
CVE-2004-2199 1 Duware 1 Duclassified 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.
CVE-2004-2200 1 Duware 1 Duforum 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text.