Lucene search
HistoryDec 20, 2005 - 2:03 a.m.
CVE-2005-4385
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.003
Percentile
69.3%
Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
Affected configurations
Node
cofaxcofaxMatch1.9.9c
ORcofaxcofaxMatch1.9.9d
ORcofaxcofaxMatch2.0_rc1
ORcofaxcofaxMatch2.0_rc2
ORcofaxcofaxMatch2.0_rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cofax | cofax | 1.9.9c | cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:* |
| cofax | cofax | 1.9.9d | cpe:2.3:a:cofax:cofax:1.9.9d:*:*:*:*:*:*:* |
| cofax | cofax | 2.0_rc1 | cpe:2.3:a:cofax:cofax:2.0_rc1:*:*:*:*:*:*:* |
| cofax | cofax | 2.0_rc2 | cpe:2.3:a:cofax:cofax:2.0_rc2:*:*:*:*:*:*:* |
| cofax | cofax | 2.0_rc3 | cpe:2.3:a:cofax:cofax:2.0_rc3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2005-4385
2005-12-20 02:00:00
exploitdb
exploitdb
Cofax 2.0 - search.htm Cross-Site Scripting
2005-12-19 00:00:00
cve
cve
CVE-2005-4385
2005-12-20 02:03:00
nuclei
nuclei
Cofax <=2.0RC3 - Cross-Site Scripting
2021-08-06 16:35:36
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.003
Percentile
69.3%
Related for NVD:CVE-2005-4385