Lucene search

[email protected]CVE-2005-4879

HistoryMar 31, 2009 - 5:30 p.m.

CVE-2005-4879

2009-03-3117:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2005-4879

cross-site scripting

xss

jax guestbook 3.1

jax guestbook 3.31

web security

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) gmt_ofs and (2) language parameters. NOTE: the page parameter is already covered by CVE-2006-1913. NOTE: it was later reported that 3.50 is also affected.

CPENameOperatorVersion
jax_scripts:jax_guestbookjax scripts jax guestbookeq3.31
jax_scripts:jax_guestbookjax scripts jax guestbookeq3.1

CPE	Name	Operator	Version
jax_scripts:jax_guestbook	jax scripts jax guestbook	eq	3.31
jax_scripts:jax_guestbook	jax scripts jax guestbook	eq	3.1

References

downloads.securityfocus.com/vulnerabilities/exploits/28523.html

lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html

secunia.com/advisories/16337

www.securityfocus.com/bid/28523

exchange.xforce.ibmcloud.com/vulnerabilities/43562

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.3%

JSON

Related for CVE-2005-4879

cvelist2 cve1 prion1