PT-2005-4610 · Searchfeed · Searchfeed Search Engine

Published 2005-11-29 · Updated 2017-07-20 · CVE-2005-3866

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SearchFeed Search Engine versions 1.3.2 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary HTML and web script. The REQ parameter, used during search operations, is potentially involved in the exploitation of this issue.

Recommendations For SearchFeed Search Engine versions 1.3.2 and earlier, as a temporary workaround, consider restricting the use of the REQ parameter in search operations until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-3866

Affected Products

Searchfeed Search Engine

References · 7

• 🔥 http://securityfocus.com/bid/15612 · Exploit
• http://secunia.com/advisories/17715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3866 · Security Note
• http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html · Note
• http://vupen.com/english/advisories/2005/2609 · Note
• http://osvdb.org/21144 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23348 · Note