Lucene search

K
cveMitreCVE-2005-4484
HistoryDec 22, 2005 - 11:03 a.m.

CVE-2005-4484

2005-12-2211:03:00
mitre
web.nvd.nist.gov
26
cve
2005
4484
xss
vulnerabilities
intranetapp

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

61.3%

Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ret_page parameter to login.asp or the (2) do_search and (3) search parameters to content.asp.

Affected configurations

Nvd
Node
iatekintranetappRange3.3
VendorProductVersionCPE
iatekintranetapp*cpe:2.3:a:iatek:intranetapp:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

61.3%

Related for CVE-2005-4484