Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Board Power 2.04PF lets attackers inject scripts

CVE-2004-1441 · published 21 years ago
Summary

The web component icq.cgi in Board Power version 2.04PF can be tricked into running any code an attacker supplies through the action field. This could let a malicious user display false information, steal login details, or take other unwanted actions on your site. Apply the vendor’s update or disable the vulnerable script until it can be patched.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
board_power board_power 2.04pf
cpe:2.3:a:board_power:board_power:2.04pf:*:*:*:*:*:*:*
Original advisory text
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
7% chance of attack within 30 days
Timeline
Published31 Dec 2004
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2004-1441 · NVD
Track software like this
Free during beta