CVE-2005-4395

Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the criteria parameter.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://pridels0.blogspot.com/2005/12/farcry-xss-vuln.html
http://secunia.com/advisories/18129
http://www.osvdb.org/21826
http://www.securityfocus.com/bid/15946
http://www.vupen.com/english/advisories/2005/2986

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:farcry:farcry:2.1.2:::::::*
	cpe:2.3:a:farcry:farcry:2.2.1:::::::*
	cpe:2.3:a:farcry:farcry:2.3.1:::::::*
	cpe:2.3:a:farcry:farcry:2.3.2:::::::*
	cpe:2.3:a:farcry:farcry:3.0:::::::*

History

No history.

Information

Published : 2005-12-20 11:03

Updated : 2024-02-28 10:42

NVD link : CVE-2005-4395

Mitre link : CVE-2005-4395

CVE.ORG link : CVE-2005-4395

JSON object : View

Products Affected

farcry

farcry

CWE

NVD-CWE-Other

{"id": "CVE-2005-4395", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-20T11:03:00.000", "references": [{"url": "http://pridels0.blogspot.com/2005/12/farcry-xss-vuln.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/18129", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/21826", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15946", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2005/2986", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the criteria parameter."}], "lastModified": "2011-03-08T02:28:11.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:farcry:farcry:2.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47654C5A-AE13-4E9D-B63C-5006FE969CF9"}, {"criteria": "cpe:2.3:a:farcry:farcry:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9448A9BA-C1AC-4246-ABC5-9F8EC2411702"}, {"criteria": "cpe:2.3:a:farcry:farcry:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71852523-6C56-4621-94A2-72C27A382133"}, {"criteria": "cpe:2.3:a:farcry:farcry:2.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E09E9D9-D71A-4088-9C9A-E0B0B13BE9DF"}, {"criteria": "cpe:2.3:a:farcry:farcry:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04B02E94-DA3A-47C0-B954-AE6BFD64D410"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}