PT-2005-5129 · Aspbite · Aspbite

Published 2005-12-21 · Updated 2008-09-05 · CVE-2005-4446

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ASPBite versions 8.x

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter in the "index.asp" file.

Recommendations For ASPBite version 8.x, avoid using the strSearch parameter in the index.asp file until a fix is available. Consider validating and sanitizing all user input to prevent malicious script injection.

Fix

Related Identifiers

CVE-2005-4446

Affected Products

Aspbite

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-4446 · Security Note
• http://secunia.com/advisories/18132 · Vendor Advisory
• http://securityfocus.com/bid/15991 · Note