4.3
CVE-2005-1945
- EPSS 1.21%
- Veröffentlicht 09.06.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:13:57
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Invision Power Services ≫ Invision Community Blog Version1.0
Invision Power Services ≫ Invision Community Blog Version1.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.21% | 0.643 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://marc.info/?l=bugtraq&m=111833601302752&w=2
http://secunia.com/advisories/15626
http://www.gulftech.org/?node=research&article_id=00078-06072005