Vulnerability record · CVE-2004-1059 · published 10 December 2004

CVE-2004-1059: Mnogosearch vulnerability

Mnogosearch · Mnogosearch

Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms.

4.3 CVSS 2.0 Medium EPSS 1.2% · top 32.8%

4.3CVSS 2.0 base score

1.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

10References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Mnogosearch Mnogosearch

References

Link	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html	PatchVendor Advisory
http://www.mikx.de/index.php?p=6	PatchVendor Advisory
http://www.mnogosearch.org/history.html	PatchVendor Advisory
http://www.securityfocus.com/bid/11895	PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18434
http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html	PatchVendor Advisory
http://www.mikx.de/index.php?p=6	PatchVendor Advisory
http://www.mnogosearch.org/history.html	PatchVendor Advisory
http://www.securityfocus.com/bid/11895	PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18434

Track CVE-2004-1059 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0288Mnogosearch vulnerabilityBuffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexi…EPSS 5.2%23 Nov 2004 7.5CVE-2011-5235Mnogosearch sql injection vulnerabilitySQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext li…EPSS 1.9%25 Oct 2012 7.5CVE-2003-0436Mnogosearch vulnerabilityBuffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.EPSS 9.7%24 Jul 2003 7.5CVE-2003-0437Mnogosearch vulnerabilityBuffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.EPSS 9.0%24 Jul 2003 7.5CVE-2002-0789Mnogosearch vulnerabilityBuffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.EPSS 3.3%12 Aug 2002 4.3CVE-2007-5588Mnogosearch cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parame…EPSS 1.1%19 Oct 2007

Source: NIST National Vulnerability Database (record CVE-2004-1059), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.