CVE-2005-3730

2022-10-0316:22:40

mitre

www.cve.org

xss

httptranslatorservlet

idetix software systems revize cms

remote attackers

web script

html

resourcetype

objectmap

redirect parameters

setwebspace.jsp

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.

References

lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html

secunia.com/advisories/17623

securitytracker.com/id?1015231

www.osvdb.org/20922

www.securityfocus.com/bid/15484