Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter in a search page, as demonstrated using (1) page1631.aspx and (2) page496.aspx.
References
Configurations
History
No history.
Information
Published : 2005-12-22 11:03
Updated : 2024-02-28 10:42
NVD link : CVE-2005-4497
Mitre link : CVE-2005-4497
CVE.ORG link : CVE-2005-4497
JSON object : View
Products Affected
tangora
- tangora_portal_cms
CWE