CVE-2005-4698

The provided records describe a Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier, exploitable via the q_IP (IP) or q_Host (HOST) parameters. The root cause is insufficient input sanitization in these parameters, enabling injection of arbitrary web script/HTML. Impact is limited ...

CVE-2005-4698: Undefined Security Weakness

Cross-site scripting XSS vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 91 qIP IP or 2 qHost HOST parameters...