Lucene search

[email protected]CVE-2005-4222

HistoryDec 14, 2005 - 11:03 a.m.

CVE-2005-4222

2005-12-1411:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2005

4222

cross-site scripting

xss

guestbook.cgi

lars ellingsen guestserver

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

53.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in guestbook.cgi in Lars Ellingsen Guestserver 4.13 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified message fields.

CPENameOperatorVersion
lars_ellingsen:guestserverlars ellingsen guestservereq4.10
lars_ellingsen:guestserverlars ellingsen guestservereq3.33
lars_ellingsen:guestserverlars ellingsen guestservereq4.13
lars_ellingsen:guestserverlars ellingsen guestservereq3.83
lars_ellingsen:guestserverlars ellingsen guestservereq3.35
lars_ellingsen:guestserverlars ellingsen guestservereq3.02
lars_ellingsen:guestserverlars ellingsen guestservereq3.30
lars_ellingsen:guestserverlars ellingsen guestservereq4.07
lars_ellingsen:guestserverlars ellingsen guestservereq3.47
lars_ellingsen:guestserverlars ellingsen guestservereq3.66

CPE	Name	Operator	Version
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	4.10
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.33
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	4.13
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.83
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.35
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.02
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.30
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	4.07
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.47
lars_ellingsen:guestserver	lars ellingsen guestserver	eq	3.66

Rows per page:

1-10 of 431

References

www.securityfocus.com/archive/1/419241/100/0/threaded

www.securityfocus.com/bid/15821/

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

53.7%

JSON

Related for CVE-2005-4222

cvelist1