CVE-2005-4493

CVE-2005-4493 describes a cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters . CVSS v2 base score reported as 6.8 (Medium) with network attack vector, no authentication, ...