Lucene search

[email protected]CVE-2005-0645

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0645

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cutenews

cross-site scripting

xss

vulnerability

web security

php code injection

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

53.2%

JSON

Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.

References

marc.info/?l=bugtraq&m=110969774502370&w=2

www.kernelpanik.org/docs/kernelpanik/cutenews.txt

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

53.2%

JSON

Related for CVE-2005-0645

nessus1