ID CVE-2005-0949
Summary Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*
    cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 12936
bugtraq 20050329 Multiple sql injection, and xss vulnerabilities in PortalApp
misc http://icis.digitalparadox.org/~dcrab/portalapp.txt
sectrack 1013591
secunia 14749
xf portalapp-contentasp-xss(19891)
Last major update 11-07-2017 - 01:32
Published 02-05-2005 - 04:00
Last modified 11-07-2017 - 01:32
Back to Top