Lucene search

MitreCVE-2005-4727

HistoryFeb 23, 2006 - 2:00 a.m.

CVE-2005-4727

2006-02-2302:00:00

mitre

web.nvd.nist.gov

cve-2005-4727

cross-site scripting

xss

gbook.cgi

gbook

vulnerability

nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.036

Percentile

91.7%

JSON

Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.

Affected configurations

Nvd

Node

martin_bauergbookMatch1.0

martin_bauergbookMatch1.0.1

VendorProductVersionCPE
martin_bauergbook1.0cpe:2.3:a:martin_bauer:gbook:1.0:*:*:*:*:*:*:*
martin_bauergbook1.0.1cpe:2.3:a:martin_bauer:gbook:1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
martin_bauer	gbook	1.0	cpe:2.3:a:martin_bauer:gbook:1.0:::::::*
martin_bauer	gbook	1.0.1	cpe:2.3:a:martin_bauer:gbook:1.0.1:::::::*

References

gbook.sourceforge.net/sec/14725

secunia.com/advisories/16668

sourceforge.net/project/shownotes.php?release_id=353531

www.osvdb.org/19144

www.securityfocus.com/archive/1/425492/100/0/threaded

www.securityfocus.com/bid/14725

www.vupen.com/english/advisories/2005/1617

exchange.xforce.ibmcloud.com/vulnerabilities/22114

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.036

Percentile

91.7%

JSON

Related for CVE-2005-4727