Lucene search
MitreCVE-2005-4231HistoryDec 14, 2005 - 11:03 a.m.
CVE-2005-4231
2005-12-1411:03:00
mitre
web.nvd.nist.gov
26
cve-2005-4231
cross-site scripting
xss
link up gold 2.5
security vulnerability
remote attack
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
68.9%
Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] parameter to search.php in a search_links_advanced action, and the (3) direction or (4) sort parameter to articles.php.
Affected configurations
Node
php_web_scriptslink_up_goldRange≤2.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| php_web_scripts | link_up_gold | * | cpe:2.3:a:php_web_scripts:link_up_gold:*:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
68.9%
Related for CVE-2005-4231