CVE-2005-4420

CVE-2005-4420

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html http://secunia.com/advisories/18127 https://exchange.xforce.ibmcloud.com/vulnerabilities/23831 http://www.osvdb.org/21828 http://www.securityfocus.com/bid/15995