CVE-2005-1800: XSS

Published May 28, 2005

Updated

Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.

Affected Software

5 affected components

Clam Anti-Virus clamav=0.84_rc1

Clam Anti-Virus clamav=0.82

Clam Anti-Virus clamav=0.81

Clam Anti-Virus clamav=0.83

Clam Anti-Virus clamav=0.84_rc2

Remediation

Patch Available

http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/034354.html

Event History

May 28, 2005

CVE Published

04:00 AM

Jun 1, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1800?

The severity of CVE-2005-1800 is considered to be high due to the potential for remote code execution through XSS attacks.

How do I fix CVE-2005-1800?

To fix CVE-2005-1800, upgrade to versions of Jaws Glossary gadget higher than 0.5.1 that have patched the XSS vulnerability.

Who is affected by CVE-2005-1800?

CVE-2005-1800 affects users of the Jaws Glossary gadget versions 0.4 to 0.5.1.

What kind of attacks can be performed with CVE-2005-1800?

Attackers can perform cross-site scripting (XSS) attacks allowing them to inject arbitrary web scripts or HTML into the affected application.

What software is related to CVE-2005-1800?

CVE-2005-1800 is related to the ClamAV versions 0.81 to 0.84_rc2 installed in Jaws Glossary gadget.