Lucene search

[email protected]CVE-2005-3834

HistoryNov 26, 2005 - 8:03 p.m.

CVE-2005-3834

2005-11-2620:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2005

3834

cross-site scripting

xss

vulnerability

search.php

tunez 1.21

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON

Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.

CPENameOperatorVersion
tunez:tuneztunezeq1.20
tunez:tuneztunezeq1.21
tunez:tuneztunezeq0.4
tunez:tuneztunezeq0.9
tunez:tuneztunezeq1.15
tunez:tuneztunezeq0.3
tunez:tuneztunezeq0.7
tunez:tuneztunezeq1.0.0
tunez:tuneztunezeq1.1
tunez:tuneztunezeq0.1

CPE	Name	Operator	Version
tunez:tunez	tunez	eq	1.20
tunez:tunez	tunez	eq	1.21
tunez:tunez	tunez	eq	0.4
tunez:tunez	tunez	eq	0.9
tunez:tunez	tunez	eq	1.15
tunez:tunez	tunez	eq	0.3
tunez:tunez	tunez	eq	0.7
tunez:tunez	tunez	eq	1.0.0
tunez:tunez	tunez	eq	1.1
tunez:tunez	tunez	eq	0.1

Rows per page:

1-10 of 131

References

pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html

secunia.com/advisories/17692

www.osvdb.org/21063

www.securityfocus.com/bid/15548

www.vupen.com/english/advisories/2005/2556

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON