Lucene search

[email protected]CVE-2005-4328

HistoryDec 17, 2005 - 11:03 a.m.

CVE-2005-4328

2005-12-1711:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-4328

cross-site scripting

xss

webglimpse

web security

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON

Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter.

CPENameOperatorVersion
university_of_arizona:webglimpseuniversity of arizona webglimpseeq2.2.1
university_of_arizona:webglimpseuniversity of arizona webglimpseeq2.2.0
university_of_arizona:webglimpseuniversity of arizona webglimpseeq2.0
university_of_arizona:webglimpseuniversity of arizona webglimpseeq2.14.1
university_of_arizona:webglimpseuniversity of arizona webglimpseeq2.2.2

CPE	Name	Operator	Version
university_of_arizona:webglimpse	university of arizona webglimpse	eq	2.2.1
university_of_arizona:webglimpse	university of arizona webglimpse	eq	2.2.0
university_of_arizona:webglimpse	university of arizona webglimpse	eq	2.0
university_of_arizona:webglimpse	university of arizona webglimpse	eq	2.14.1
university_of_arizona:webglimpse	university of arizona webglimpse	eq	2.2.2

References

pridels0.blogspot.com/2005/12/webglimpse-xss-vuln.html

secunia.com/advisories/18076

www.osvdb.org/21791

www.securityfocus.com/bid/15916

www.vupen.com/english/advisories/2005/2966

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%

JSON