CVE-2005-1322

EPSS 0.34%
Published 02.05.2005 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Horde ≫ Nag Version1.1.1

Horde ≫ Nag Version1.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.34%	0.534

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.54.2.33&r2=1.54.2.35&ty=h

http://lists.horde.org/archives/nag/Week-of-Mon-20050418/000756.html

Patch

http://secunia.com/advisories/15079

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2005-1322

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-1322

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-1322

EUVD