5.8
CVE-2005-4364
- EPSS 1.74%
- Veröffentlicht 20.12.2005 01:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hot Banana ≫ Web Content Management Suite Version5.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.74% | 0.748 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
http://pridels0.blogspot.com/2005/12/hot-banana-xss-vuln.html
http://secunia.com/advisories/18126
http://www.osvdb.org/21786
http://www.securityfocus.com/bid/15948
http://www.vupen.com/english/advisories/2005/2992