Lucene search
HistoryNov 30, 2005 - 11:03 a.m.
CVE-2005-3908
cve-2005-3908
cross-site scripting
xss
ghostscripter
amazon shop
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.6%
Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query parameter.
Affected configurations
Node
amazon_shopamazon_shopRange≤5.0.0
ORamazon_shopamazon_shopRange≤5.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| amazon_shop:amazon_shop | amazon shop | le | 5.0.0 |
| amazon_shop:amazon_shop | amazon shop | le | 5.0.1 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.6%
Related for CVE-2005-3908