PT-2005-4797 · Xcclassified · Xcclassified

Published 2005-12-07 · Updated 2011-03-08 · CVE-2005-4062

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XcClassified versions 3.x

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the search parameters in the CPSearch.asp file.

Recommendations For XcClassified versions 3.x, consider restricting access to the CPSearch.asp file until a patch is available, and avoid using the search function with untrusted input to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4062

Affected Products

Xcclassified

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-4062 · Security Note
• http://vupen.com/english/advisories/2005/2760 · Note
• http://pridels0.blogspot.com/2005/12/xcclassified-v3x-xss-vuln.html · Note
• http://osvdb.org/21470 · Note
• http://secunia.com/advisories/17903 · Note
• http://securityfocus.com/bid/15738 · Note