Lucene search

MitreCVE-2005-4858

HistoryJul 06, 2007 - 7:00 p.m.

CVE-2005-4858

2007-07-0619:00:00

mitre

web.nvd.nist.gov

cve-2005-4858

cross-site scripting

xss

mimic2

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.002

Percentile

64.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters associated with the (1) name, (2) title, and (3) comment sections, as demonstrated by referencing a remote document through the SRC attribute of an IFRAME element.

Affected configurations

Nvd

Node

chittamimicboard_2Range≤086

VendorProductVersionCPE
chittamimicboard_2*cpe:2.3:a:chitta:mimicboard_2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
chitta	mimicboard_2	*	cpe:2.3:a:chitta:mimicboard_2::::::::

References

exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt

www.securityfocus.com/bid/14778

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.002

Percentile

64.4%

JSON

Related for CVE-2005-4858