Lucene search

K
cveMitreCVE-2005-2814
HistorySep 07, 2005 - 6:03 p.m.

CVE-2005-2814

2005-09-0718:03:00
mitre
web.nvd.nist.gov
28
cve-2005-2814
cross-site scripting
xss
flatnuke
web security
remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.3%

Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a vis_reg operation to index.php.

Affected configurations

Nvd
Node
flatnukeflatnukeMatch2.5.6
VendorProductVersionCPE
flatnukeflatnuke2.5.6cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.3%

Related for CVE-2005-2814