CVE-2005-2392: XSS
Published Jul 27, 2005
·Updated
Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.
Affected Software
29 affected components
CMSmadesimple CMS Made Simple=1.0
CMSmadesimple CMS Made Simple=1.1
CMSmadesimple CMS Made Simple=1.2
CMSmadesimple CMS Made Simple=1.3-beta1
CMSmadesimple CMS Made Simple=1.3-beta2
CMSmadesimple CMS Made Simple=2.0-beta1
CMSmadesimple CMS Made Simple=2.0-beta2
CMSmadesimple CMS Made Simple=2.0-beta3
CMSmadesimple CMS Made Simple=2.0-beta4
CMSmadesimple CMS Made Simple=2.1
CMSmadesimple CMS Made Simple=2.2
CMSmadesimple CMS Made Simple=2.2-beta1
CMSmadesimple CMS Made Simple=2.2-beta2
CMSmadesimple CMS Made Simple=2.2-beta3
CMSmadesimple CMS Made Simple=2.2-beta4
CMSmadesimple CMS Made Simple=2.3
CMSmadesimple CMS Made Simple=2.3-beta1
CMSmadesimple CMS Made Simple=2.3-beta2
CMSmadesimple CMS Made Simple=2.3-beta3
CMSmadesimple CMS Made Simple=2.3-beta4
CMSmadesimple CMS Made Simple=2.3-beta5
CMSmadesimple CMS Made Simple=2.4-beta1
CMSmadesimple CMS Made Simple=2.4-beta2
CMSmadesimple CMS Made Simple=2.4-beta3
CMSmadesimple CMS Made Simple=2.4-beta4
CMSmadesimple CMS Made Simple=2.4-beta5
CMSmadesimple CMS Made Simple=2.4_beta
CMSmadesimple CMS Made Simple=beta_1
CMSmadesimple CMS Made Simple=beta_2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jul 27, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2392?
CVE-2005-2392 is classified with a medium severity due to its cross-site scripting potential.
2
How do I fix CVE-2005-2392?
To fix CVE-2005-2392, upgrade to CMSimple version 2.5 or later where the vulnerability has been patched.
3
What types of attacks are possible with CVE-2005-2392?
Attackers can perform cross-site scripting attacks allowing unauthorized scripts to run in the user's browser.
4
Which software versions are affected by CVE-2005-2392?
CVE-2005-2392 affects CMSimple versions 2.4 and earlier, including beta versions.
5
Can CVE-2005-2392 affect user data?
Yes, CVE-2005-2392 can compromise user data by executing scripts that can capture sensitive information.