Lucene search

[email protected]CVE-2005-4372

HistoryDec 20, 2005 - 2:03 a.m.

CVE-2005-4372

2005-12-2002:03:00

[email protected]

web.nvd.nist.gov

cve-2005-4372

xss

account.html

awf

web script injection

html injection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected configurations

NVD

Node

liquid_bytes_technologiesadaptive_website_frameworkMatch1.11

liquid_bytes_technologiesadaptive_website_frameworkMatch2.00

liquid_bytes_technologiesadaptive_website_frameworkMatch2.01

liquid_bytes_technologiesadaptive_website_frameworkMatch2.10

CPENameOperatorVersion
liquid_bytes_technologies:adaptive_website_frameworkliquid bytes technologies adaptive website frameworkeq1.11
liquid_bytes_technologies:adaptive_website_frameworkliquid bytes technologies adaptive website frameworkeq2.00
liquid_bytes_technologies:adaptive_website_frameworkliquid bytes technologies adaptive website frameworkeq2.01
liquid_bytes_technologies:adaptive_website_frameworkliquid bytes technologies adaptive website frameworkeq2.10

CPE	Name	Operator	Version
liquid_bytes_technologies:adaptive_website_framework	liquid bytes technologies adaptive website framework	eq	1.11
liquid_bytes_technologies:adaptive_website_framework	liquid bytes technologies adaptive website framework	eq	2.00
liquid_bytes_technologies:adaptive_website_framework	liquid bytes technologies adaptive website framework	eq	2.01
liquid_bytes_technologies:adaptive_website_framework	liquid bytes technologies adaptive website framework	eq	2.10

References

pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html

www.awf-cms.org/news.html

www.osvdb.org/21914

www.securityfocus.com/bid/15937

www.vupen.com/english/advisories/2005/2973

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for CVE-2005-4372

nvd1 cvelist1