Lucene search
HistoryDec 17, 2005 - 12:03 a.m.
CVE-2005-4311
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
66.3%
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.
Affected configurations
Node
dcscriptsdcforumMatch2k_1.1
ORdcscriptsdcforumMatch5.11
ORdcscriptsdcforumMatch6.0
ORdcscriptsdcforumMatch6.1
ORdcscriptsdcforumMatch6.2
ORdcscriptsdcforumMatch6.21
ORdcscriptsdcforumMatch6.22
ORdcscriptsdcforumMatch6.23
ORdcscriptsdcforumMatch6.25
ORdcscriptsdcforumMatch2000_1.1
ORdcscriptsdcforum\+Match1.0
ORdcscriptsdcforum\+Match1.1
ORdcscriptsdcforum\+Match1.001
ORdcscriptsdcforum\+Match1.002
ORdcscriptsdcforum\+Match1.2
ORdcscriptsdcforum\+Match1.003
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
66.3%
Related for NVD:CVE-2005-4311