Published: 22/12/2005 Updated: 13/09/2011

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) query string, (2) textonly, (3) locID, and (4) lang parameters to (a) Default.aspx, and the (6) ClickFrom parameter to (b) Request-call-back.html and (c) registration-form.html. NOTE: the vendor states "This issue was resolved by a minor update to Sitekit CMS v6.6, sanitising the html code and eradicating related security issues."

Vulnerable Product	Search on Vulmon	Subscribe to Product
sitekit solutions sitekit cms

source: wwwsecurityfocuscom/bid/16016/info Sitekit CMS is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the con ...

source: wwwsecurityfocuscom/bid/16016/info Sitekit CMS is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the conte ...

source: wwwsecurityfocuscom/bid/16016/info Sitekit CMS is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context ...

CWE-79 http://www.securityfocus.com/bid/16016 http://www.attrition.org/pipermail/vim/2006-March/000611.html http://www.osvdb.org/22071 http://www.osvdb.org/22072 http://www.osvdb.org/22073 http://pridels0.blogspot.com/2005/12/sitekit-cms-multiple-xss-vuln.html http://www.vupen.com/english/advisories/2005/3050 https://nvd.nist.gov https://www.exploit-db.com/exploits/26949/

CVE-2005-4491

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect