PT-2005-5158 · Alkacon · Opencms

Published 2005-12-22 · Updated 2008-09-20 · CVE-2005-4475

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenCms versions 6.0.3 and earlier

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

Recommendations For OpenCms versions 6.0.3 and earlier, consider restricting access to search functionality until a fix is available. As a temporary workaround, avoid using unspecified search parameters in the affected search functionality.

Fix

Related Identifiers

CVE-2005-4475

Affected Products

Opencms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-4475 · Security Note
• http://pridels0.blogspot.com/2005/12/opencms-xss-vuln.html · Note
• http://securityfocus.com/bid/16003 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4475 · Note
• http://osvdb.org/21877 · Note