CVE-2005-4698

The provided records describe a Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier, exploitable via the q_IP (IP) or q_Host (HOST) parameters. The root cause is insufficient input sanitization in these parameters, enabling injection of arbitrary web script/HTML. Impact is limited ...