4.3
CVE-2005-4433
- EPSS 1.18%
- Veröffentlicht 21.12.2005 01:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:47
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Esselbach Internet Solutions ≫ Esselbach Storyteller Cms Version1.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.18% | 0.635 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html
http://secunia.com/advisories/18130
http://www.osvdb.org/21787
http://www.securityfocus.com/bid/15945
http://www.vupen.com/english/advisories/2005/2985