4.3
CVE-2005-3999
- EPSS 1.3%
- Veröffentlicht 05.12.2005 00:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:02
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sitebeater ≫ Sitebeater Mp3 Catalog Version2.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.3% | 0.666 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html
http://secunia.com/advisories/17856
http://www.osvdb.org/21424
http://www.securityfocus.com/bid/15696
http://www.vupen.com/english/advisories/2005/2718
https://exchange.xforce.ibmcloud.com/vulnerabilities/23403