Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) the parameters to the installer.
References
Link | Resource |
---|---|
http://secunia.com/advisories/17505 | |
http://secunia.com/advisories/17655 | Vendor Advisory |
http://www.securityfocus.com/archive/1/417218 | Vendor Advisory |
http://secunia.com/advisories/17505 | |
http://secunia.com/advisories/17655 | Vendor Advisory |
http://www.securityfocus.com/archive/1/417218 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:02
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/17505 - | |
References | () http://secunia.com/advisories/17655 - Vendor Advisory | |
References | () http://www.securityfocus.com/archive/1/417218 - Vendor Advisory |
Information
Published : 2005-11-22 23:03
Updated : 2024-11-21 00:02
NVD link : CVE-2005-3761
Mitre link : CVE-2005-3761
CVE.ORG link : CVE-2005-3761
JSON object : View
Products Affected
exponent
- exponent
CWE