Lucene search

MitreCVE-2005-2776

HistorySep 02, 2005 - 11:03 p.m.

CVE-2005-2776

2005-09-0223:03:00

mitre

web.nvd.nist.gov

cve-2005-2776

xss

vulnerabilities

looking glass 20040427

web script

html

remote attackers

footer.php

header.php

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.01

Percentile

84.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php.

Affected configurations

Nvd

Node

looking_glasslooking_glassMatch2004-04-27

VendorProductVersionCPE
looking_glasslooking_glass2004-04-27cpe:2.3:a:looking_glass:looking_glass:2004-04-27:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
looking_glass	looking_glass	2004-04-27	cpe:2.3:a:looking_glass:looking_glass:2004-04-27:::::::*

References

de-neef.net/articles.php?id=2&page=2

marc.info/?l=bugtraq&m=112516327607001&w=2

rgod.altervista.org/lookingglass.html

secunia.com/advisories/16607/

www.securityfocus.com/bid/14680

exchange.xforce.ibmcloud.com/vulnerabilities/22044

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.01

Percentile

84.0%

JSON

Related for CVE-2005-2776