Lucene search
MitreCVE-2005-0281HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0281
2005-05-0204:00:00
mitre
web.nvd.nist.gov
25
cve-2005-0281
cross-site scripting
xss
soldner secret wars
web interface
remote attackers
server logs
vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
72.0%
Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs.
Affected configurations
Node
jowood_productionssoldner_secret_warsRange≤30830
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jowood_productions | soldner_secret_wars | * | cpe:2.3:a:jowood_productions:soldner_secret_wars:*:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
72.0%
Related for CVE-2005-0281