<!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site s...">CVE-2005-1909 - vulnerability database | Vulners.com<!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site s..."><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site s..."><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site s...">
Lucene search

K
nvd[email protected]NVD:CVE-2005-1909
HistoryJun 09, 2005 - 4:00 a.m.

CVE-2005-1909

2005-06-0904:00:00
web.nvd.nist.gov
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.5%

The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a “</pre><!-” sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.

Affected configurations

Nvd
Node
software602602lan_suiteMatch2004
VendorProductVersionCPE
software602602lan_suite2004cpe:2.3:a:software602:602lan_suite:2004:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.5%

Related for NVD:CVE-2005-1909