First published: Mon Mar 07 2005(Updated: )
Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun Solaris Answerbook2 | =1.4 | |
Sun Solaris Answerbook2 | =1.4.1 | |
Sun Solaris Answerbook2 | =1.2 | |
Sun Solaris Answerbook2 | =1.4.4 | |
Sun Solaris Answerbook2 | =1.4.3 | |
Sun Solaris Answerbook2 | =1.4.2 | |
Sun Solaris Answerbook2 | =1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2005-0548 is widely acknowledged as moderate due to the potential for cross-site scripting attacks.
To fix CVE-2005-0548, you should upgrade to a patched version of Solaris AnswerBook2 that has resolved the XSS vulnerability.
CVE-2005-0548 affects Solaris AnswerBook2 versions 1.2, 1.3, 1.4, and their sub-versions up to 1.4.4.
CVE-2005-0548 is a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts or HTML.
Preventing CVE-2005-0548 without an update is challenging; however, applying input validation on search functionalities can help mitigate potential attacks.