Lucene search

[email protected]CVE-2005-1492

HistoryMay 11, 2005 - 4:00 a.m.

CVE-2005-1492

2005-05-1104:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1492

cross-site scripting

xss

gossamer threads

links sql

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.2 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

JSON

Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Affected configurations

NVD

Node

gossamer_threadsgossamer_threads_linksMatch2.0

gossamer_threadsgossamer_threads_linksMatch2.2.0

gossamer_threadsgossamer_threads_links-sqlMatch3.0

CPENameOperatorVersion
gossamer_threads:gossamer_threads_linksgossamer threads gossamer threads linkseq2.0
gossamer_threads:gossamer_threads_linksgossamer threads gossamer threads linkseq2.2.0
gossamer_threads:gossamer_threads_links-sqlgossamer threads gossamer threads links-sqleq3.0

CPE	Name	Operator	Version
gossamer_threads:gossamer_threads_links	gossamer threads gossamer threads links	eq	2.0
gossamer_threads:gossamer_threads_links	gossamer threads gossamer threads links	eq	2.2.0
gossamer_threads:gossamer_threads_links-sql	gossamer threads gossamer threads links-sql	eq	3.0

References

gossamer-threads.com/perl/gforum/gforum.cgi?post=281029%3B

marc.info/?l=bugtraq&m=111531023916998&w=2

secunia.com/advisories/15253

securitytracker.com/id?1013891

www.gossamer-threads.com/forum/Gossamer_Links_3.0.1_Released_P280986/

www.osvdb.org/16189

www.securityfocus.com/bid/13484

exchange.xforce.ibmcloud.com/vulnerabilities/20415

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.2 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

JSON

Related for CVE-2005-1492

nessus1 nvd1 cvelist1