Lucene search

MitreCVE-2005-4493

HistoryDec 22, 2005 - 11:03 a.m.

CVE-2005-4493

2005-12-2211:03:00

mitre

web.nvd.nist.gov

cve-2005-4493

cross-site scripting

xss

speartek 6.0

remote attackers

html

vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.016

Percentile

87.5%

JSON

Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

Affected configurations

Nvd

Node

speartekspeartekMatch6.0

VendorProductVersionCPE
speartekspeartek6.0cpe:2.3:a:speartek:speartek:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
speartek	speartek	6.0	cpe:2.3:a:speartek:speartek:6.0:::::::*

References

pridels0.blogspot.com/2005/12/speartek-xss-vuln.html

www.attrition.org/pipermail/vim/2006-August/001008.html

www.osvdb.org/22068

www.securityfocus.com/bid/16018

www.vupen.com/english/advisories/2005/3052

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.016

Percentile

87.5%

JSON

Related for CVE-2005-4493