CVE-2005-3037

CVE-2005-3037 is an XSS vulnerability in Handy Address Book Server 1.1. The issue allows remote attackers to inject arbitrary script or HTML via the SEARCHTEXT parameter in a demos URL, indicating improper input handling in the web interface. The connected documents provide the vulnerability desc...

Unpassworded 'demos' Account

The account 'demos' has no password set. An attacker may use this account to gain further privileges on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "demos"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11242; scriptversion"1.35";...