Lucene search
HistoryDec 07, 2005 - 11:03 a.m.
CVE-2005-4062
cve-2005-4062
xss
vulnerability
cpsearch.asp
xcclassified 3.x
remote attackers
web script
html
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.0%
Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameters.
Affected configurations
Node
xcentxcclassified
| CPE | Name | Operator | Version |
|---|---|---|---|
| xcent:xcclassified | xcent xcclassified | eq | * |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.0%
Related for CVE-2005-4062