CVE-2005-4363: XSS

Published Dec 20, 2005

Updated

Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

Affected Software

1 affected component

Komodo Komodo CMS=2.1

Remediation

Patch Available

http://secunia.com/advisories/18120

Event History

Dec 20, 2005

CVE Published

01:03 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

A remote attacker can exploit it without authentication by supplying crafted input through affected search parameters.

What impact could successful exploitation have?

The vulnerability can allow injected script or HTML to run in a victim's browser in the context of the affected Komodo CMS site, potentially compromising confidentiality or integrity of user-accessible content.

What should be done to remediate it?

Apply the available patch for Komodo CMS. The provided information identifies version 2.1 as affected but does not specify the fixed version.

CVE-2005-4363: XSS

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

What should be done to remediate it?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

What should be done to remediate it?