CVE-2005-4363: XSS
Published Dec 20, 2005
·Updated
Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Affected Software
1 affected component
Komodo Komodo CMS=2.1
Remediation
Patch Available
Event History
Dec 20, 2005
CVE Published
01:03 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker can exploit it without authentication by supplying crafted input through affected search parameters.
2
What impact could successful exploitation have?
The vulnerability can allow injected script or HTML to run in a victim's browser in the context of the affected Komodo CMS site, potentially compromising confidentiality or integrity of user-accessible content.
3
What should be done to remediate it?
Apply the available patch for Komodo CMS. The provided information identifies version 2.1 as affected but does not specify the fixed version.