Lucene search
MitreCVE-2005-4284HistoryDec 16, 2005 - 11:03 a.m.
CVE-2005-4284
2005-12-1611:03:00
mitre
web.nvd.nist.gov
25
cve-2005-4284
cross-site scripting
xss vulnerability
staticstore search engine
search engine
security vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0.006
Percentile
78.3%
Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.
Affected configurations
Node
static_storestaticstoreRange≤1.189a
| Vendor | Product | Version | CPE |
|---|---|---|---|
| static_store | staticstore | * | cpe:2.3:a:static_store:staticstore:*:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0.006
Percentile
78.3%
Related for CVE-2005-4284