Lucene search

[email protected]CVE-2005-4386

HistoryDec 20, 2005 - 2:03 a.m.

CVE-2005-4386

2005-12-2002:03:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2005-4386

xss

colony cms

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.7%

JSON

Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

Affected configurations

NVD

Node

colonycolony_cmsRange≤2.75

colonycolony_e-commerce_cmsMatch-

colonycolony_enterprise_cms

colonycolony_government_cms

CPENameOperatorVersion
colony:colony_cmscolony colony cmsle2.75
colony:colony_e-commerce_cmscolony colony e-commerce cmseq-
colony:colony_enterprise_cmscolony colony enterprise cmseq*
colony:colony_government_cmscolony colony government cmseq*

CPE	Name	Operator	Version
colony:colony_cms	colony colony cms	le	2.75
colony:colony_e-commerce_cms	colony colony e-commerce cms	eq	-
colony:colony_enterprise_cms	colony colony enterprise cms	eq	*
colony:colony_government_cms	colony colony government cms	eq	*

References

pridels0.blogspot.com/2005/12/colony-cms-xss-vuln.html

www.osvdb.org/21853

www.securityfocus.com/bid/15941

www.vupen.com/english/advisories/2005/2978

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.7%

JSON

Related for CVE-2005-4386

nvd1 cvelist1