Lucene search

MitreCVE-2005-4256

HistoryDec 15, 2005 - 11:03 a.m.

CVE-2005-4256

2005-12-1511:03:00

mitre

web.nvd.nist.gov

cve-2005-4256

cross-site scripting

xss

asp-dev xm forum rc3

remote attackers

web script

html

forum_title parameter

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.007

Percentile

80.6%

JSON

Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_title parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in question because “forum_title” does not appear to be specified in the source code for XM Forum RC3. It is possible, but not certain, that this is CVE-2004-2211.

Affected configurations

Nvd

Node

asp-devxm_forumMatchrc3

VendorProductVersionCPE
asp-devxm_forumrc3cpe:2.3:a:asp-dev:xm_forum:rc3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
asp-dev	xm_forum	rc3	cpe:2.3:a:asp-dev:xm_forum:rc3:::::::*

References

www.securityfocus.com/bid/15858

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.007

Percentile

80.6%

JSON

Related for CVE-2005-4256