Lucene search
HistoryNov 01, 2005 - 12:47 p.m.
CVE-2005-3406
cve-2005-3406
cross-site scripting
xss
phpesp
vulnerability
web script
html
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.3%
Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected configurations
Node
butterfatphpespMatch1.3_final
ORbutterfatphpespMatch1.4_beta1
ORbutterfatphpespMatch1.4_beta2
ORbutterfatphpespMatch1.4_beta3
ORbutterfatphpespMatch1.4_final
ORbutterfatphpespMatch1.5_final
ORbutterfatphpespMatch1.5_rc1
ORbutterfatphpespMatch1.5_rc2
ORbutterfatphpespMatch1.5_rc3
ORbutterfatphpespMatch1.6.1_final
ORbutterfatphpespMatch1.6_final
ORbutterfatphpespMatch1.6_rc1
ORbutterfatphpespMatch1.6_rc2
ORbutterfatphpespMatch1.6_rc3
ORbutterfatphpespMatch1.7
ORbutterfatphpespMatch1.7.1
ORbutterfatphpespMatch1.7.2
ORbutterfatphpespMatch1.7.5
ORbutterfatphpespMatch1.7.5_dev1
ORbutterfatphpespMatch1.7.5_dev2
ORbutterfatphpespMatch1.7.5_dev3
ORbutterfatphpespMatch1.7_dev
ORbutterfatphpespMatch1.7_rc1
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.3%
Related for CVE-2005-3406