CVE-2005-4547

CVE-2005-4547

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://pridels0.blogspot.com/2005/12/eggblog-vuln.html http://secunia.com/advisories/18212 https://exchange.xforce.ibmcloud.com/vulnerabilities/23856 http://www.osvdb.org/21909