PT-2005-5158 · Alkacon · Opencms

Publicado 2005-12-22 · Atualizado 2008-09-20 · CVE-2005-4475

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenCms versions 6.0.3 and earlier

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

Recommendations For OpenCms versions 6.0.3 and earlier, consider restricting access to search functionality until a fix is available. As a temporary workaround, avoid using unspecified search parameters in the affected search functionality.

Correção

Identificadores relacionados

CVE-2005-4475

Produtos afetados

Opencms

Referências · 5

• http://pridels0.blogspot.com/2005/12/opencms-xss-vuln.html · Nota
• http://securityfocus.com/bid/16003 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4475 · Nota
• http://osvdb.org/21877 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4475 · Nota de Segurança