Lucene search
HistoryMay 25, 2005 - 4:00 a.m.
CVE-2005-1684
cve-2005-1684
cross-site scripting
xss
episodex
guestbook
remote attackers
web script
html
name field
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.4%
Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields.
Affected configurations
Node
episodexepisodex_guestbook
| CPE | Name | Operator | Version |
|---|---|---|---|
| episodex:episodex_guestbook | episodex episodex guestbook | eq | * |
Related
nvd
nvd
CVE-2005-1684
2005-05-20 04:00:00
openvas
openvas
Episodex Guestbook Unauthorized Access and HTML Injection Vulnerability
2005-11-03 00:00:00
Episodex Guestbook Unauthorized Access and HTML Injection Vulnerability
2005-11-03 00:00:00
cvelist
cvelist
CVE-2005-1684
2005-05-25 04:00:00
nessus
nessus
Episodex Guestbook Multiple Vulnerabilities (Auth Bypass, XSS)
2005-05-24 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.4%
Related for CVE-2005-1684