First published: Tue Dec 20 2005(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in text.php and (2) frame parameter in forum.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Foreman | =0.9.0.1029 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-4365 is considered a moderate severity vulnerability due to its impact on the security of web applications.
To mitigate CVE-2005-4365, sanitize and validate user inputs in the affected parameters to prevent XSS attacks.
CVE-2005-4365 allows attackers to inject arbitrary web scripts or HTML, potentially compromising user data and session integrity.
Users and administrators of FLIP version 0.9.0.1029 are directly affected by CVE-2005-4365.
No official patch is provided for CVE-2005-4365, so users are encouraged to implement input validation and sanitization as a workaround.