Lucene search

[email protected]CVE-2005-3283

HistoryOct 23, 2005 - 10:02 a.m.

CVE-2005-3283

2005-10-2310:02:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2005-3283

cross-site scripting

xss

tikiwiki

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected configurations

NVD

Node

tikitikiwiki_cms\/groupwareRange≤1.9.1

tikitikiwiki_cms\/groupwareMatch1.9.0

tikitikiwiki_cms\/groupwareMatch1.9.0rc1

tikitikiwiki_cms\/groupwareMatch1.9.0rc2

tikitikiwiki_cms\/groupwareMatch1.9.0rc3

CPENameOperatorVersion
tiki:tikiwiki_cms\/groupwaretiki tikiwiki cms/groupwarele1.9.1
tiki:tikiwiki_cms\/groupwaretiki tikiwiki cms/groupwareeq1.9.0

CPE	Name	Operator	Version
tiki:tikiwiki_cms\/groupware	tiki tikiwiki cms/groupware	le	1.9.1
tiki:tikiwiki_cms\/groupware	tiki tikiwiki cms/groupware	eq	1.9.0

References

bugs.gentoo.org/show_bug.cgi?id=109858

secunia.com/advisories/17279

secunia.com/advisories/17363

securitytracker.com/id?1015087

sourceforge.net/project/shownotes.php?release_id=364457

tikiwiki.org/art118

www.gentoo.org/security/en/glsa/glsa-200510-23.xml

www.securityfocus.com/bid/15164

www.vupen.com/english/advisories/2005/2176

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Related for CVE-2005-3283

nessus1 nvd1 openvas2 gentoo1 cvelist1