4.3
CVSSv2

CVE-2005-4588

Published: 30/12/2005 Updated: 20/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote malicious users to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

dream4 koobi 5.0

Exploits

source: wwwsecurityfocuscom/bid/16078/info Koobi is prone to a script injection vulnerability An attacker can nest BBCode URL tags to trigger this issue and execute arbitrary code in a user's browser Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based au ...