4.3
CVSSv2

CVE-2005-0945

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote malicious users to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.

Vulnerable Product Search on Vulmon Subscribe to Product

asp press acs blog 1.1.1

Exploits

source: wwwsecurityfocuscom/bid/12921/info ACS Blog is affected by an HTML injection vulnerability The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user views an affected Web page Name: <script>alert("xss");</script> ...