{"id": "CVE-2005-0802", "bulletinFamily": "NVD", "title": "CVE-2005-0802", "description": "Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter.", "published": "2005-05-02T04:00:00", "modified": "2017-07-11T01:32:00", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-0802", "reporter": "cve@mitre.org", "references": ["http://www.securityfocus.com/bid/12836", "http://securitytracker.com/id?1013470", "http://secunia.com/advisories/14625/", "http://www.osvdb.org/14861", "http://marc.info/?l=bugtraq&m=111108840811698&w=2", "https://exchange.xforce.ibmcloud.com/vulnerabilities/19728"], "cvelist": ["CVE-2005-0802"], "type": "cve", "lastseen": "2019-05-29T18:08:13", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "4e74976682f9e994ae726d3c5cda3e55"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d9e9725ca0b47aedd4f57449b9701681"}, {"key": "cpe23", "hash": "dc6dd5f2778b0cfd502a755be2f35ea8"}, {"key": "cvelist", "hash": "bb074534219d0a091d9577a8efaba4a5"}, {"key": "cvss", "hash": "f74a1c24e49a5ecb0eefb5e51d4caa14"}, {"key": "cvss2", "hash": "1376299678e4b22a45cbb6e661929c18"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "f64c771e113c47d6d2deec970ebf61aa"}, {"key": "href", "hash": "4b68810be68e0197a600e47171f73da9"}, {"key": "modified", "hash": "83de1fd34ae7439525b2c7f78002fac2"}, {"key": "published", "hash": "c13cd72b1fb79a3190ca4c56e280fabc"}, {"key": "references", "hash": "79b8fd73f7e2bbbbf155339aa9461570"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "85d6d0209eff4e92f261c3bb94f0764f"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "80a929c600e704cc5c31b6c2a2d5923b09bb588b48fd8bae7e947a2e74cfc78a", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "exploitdb", "idList": ["EDB-ID:25233"]}], "modified": "2019-05-29T18:08:13"}, "score": {"value": 6.1, "vector": "NONE", "modified": "2019-05-29T18:08:13"}, "vulnersScore": 6.1}, "objectVersion": "1.3", "cpe": ["cpe:/a:asp_press:acs_blog:0.8", "cpe:/a:asp_press:acs_blog:1.1b", "cpe:/a:asp_press:acs_blog:0.9", "cpe:/a:asp_press:acs_blog:1.0"], "affectedSoftware": [{"name": "asp_press acs_blog", "operator": "eq", "version": "1.1b"}, {"name": "asp_press acs_blog", "operator": "eq", "version": "1.0"}, {"name": "asp_press acs_blog", "operator": "eq", "version": "0.9"}, {"name": "asp_press acs_blog", "operator": "eq", "version": "0.8"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:asp_press:acs_blog:0.9:*:*:*:*:*:*:*", "cpe:2.3:a:asp_press:acs_blog:1.1b:*:*:*:*:*:*:*", "cpe:2.3:a:asp_press:acs_blog:1.0:*:*:*:*:*:*:*", "cpe:2.3:a:asp_press:acs_blog:0.8:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}

{"exploitdb": [{"lastseen": "2016-02-03T00:55:50", "bulletinFamily": "exploit", "description": "ACS Blog 0.8/0.9/1.0/1.1 Search.ASP Cross-Site Scripting Vulnerability. CVE-2005-0802. Webapps exploit for asp platform", "modified": "2005-03-17T00:00:00", "published": "2005-03-17T00:00:00", "id": "EDB-ID:25233", "href": "https://www.exploit-db.com/exploits/25233/", "type": "exploitdb", "title": "ACS Blog 0.8/0.9/1.0/1.1 - Search.ASP Cross-Site Scripting Vulnerability", "sourceData": "source: http://www.securityfocus.com/bid/12836/info\r\n\r\nACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.\r\n\r\nAn attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. \r\n\r\nhttp://www.example.com//search.asp?search=%22%3Cbr%3E%3Ciframe+src%3D%22http%3A%2F%2Fgoogle.com%22%3E%3C%2Fiframe%3E ", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "sourceHref": "https://www.exploit-db.com/download/25233/"}]}