Lucene search

MitreCVE-2005-4747

HistoryMar 28, 2006 - 11:00 a.m.

CVE-2005-4747

2006-03-2811:00:00

mitre

web.nvd.nist.gov

cve-2005-4747

cross-site scripting

xss

webhost automation ltd helm

security vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page.

Affected configurations

Nvd

Node

webhost_automationhelm_web_hosting_control_panelMatch3.2.0

webhost_automationhelm_web_hosting_control_panelMatch3.2.1

webhost_automationhelm_web_hosting_control_panelMatch3.2.2

webhost_automationhelm_web_hosting_control_panelMatch3.2.3

webhost_automationhelm_web_hosting_control_panelMatch3.2.4

webhost_automationhelm_web_hosting_control_panelMatch3.2.5

VendorProductVersionCPE
webhost_automationhelm_web_hosting_control_panel3.2.0cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.0:*:*:*:*:*:*:*
webhost_automationhelm_web_hosting_control_panel3.2.1cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.1:*:*:*:*:*:*:*
webhost_automationhelm_web_hosting_control_panel3.2.2cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.2:*:*:*:*:*:*:*
webhost_automationhelm_web_hosting_control_panel3.2.3cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.3:*:*:*:*:*:*:*
webhost_automationhelm_web_hosting_control_panel3.2.4cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.4:*:*:*:*:*:*:*
webhost_automationhelm_web_hosting_control_panel3.2.5cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webhost_automation	helm_web_hosting_control_panel	3.2.0	cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.0:::::::*
webhost_automation	helm_web_hosting_control_panel	3.2.1	cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.1:::::::*
webhost_automation	helm_web_hosting_control_panel	3.2.2	cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.2:::::::*
webhost_automation	helm_web_hosting_control_panel	3.2.3	cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.3:::::::*
webhost_automation	helm_web_hosting_control_panel	3.2.4	cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.4:::::::*
webhost_automation	helm_web_hosting_control_panel	3.2.5	cpe:2.3:a:webhost_automation:helm_web_hosting_control_panel:3.2.5:::::::*

References

attrition.org/pipermail/vim/2006-March/000653.html

attrition.org/pipermail/vim/2006-March/000654.html

www.webhostautomation.com/webhost-301

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Related for CVE-2005-4747