Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2005-4492

Published: 22/12/2005 Updated: 08/03/2011
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified search parameters, possibly the norelay_highlight_words parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

starphire technologies sitesage-sb

starphire technologies sitesage-se

starphire technologies sitesage 5.0.18

starphire technologies sitesage-ee

starphire technologies sitesage-le

References

NVD-CWE-Otherhttp://www.securityfocus.com/bid/16017http://secunia.com/advisories/18214http://www.osvdb.org/21861http://pridels0.blogspot.com/2005/12/sitesage-xss-vuln.htmlhttp://www.vupen.com/english/advisories/2005/3051https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of serviceCVE-2024-27371CVE-2024-20405CVE-2024-31627CVE-2024-31625race conditionCVE-2024-4358cross-site scriptingCVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook