CVE-2005-4409
Published Dec 20, 2005
Last updated 16 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "066FD7CE-8472-4A1A-8766-B460D8EBBDDC"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7076AC8-C7EB-49DD-A0CB-DC0293A36DED"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85DD7BCF-60BD-4E82-90B3-563AF96FCB82"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "524C9327-B787-4470-B701-67CC10469B6C"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB75C3F1-CB67-4937-803E-CC337D17BADB"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B40E338E-CB83-40F8-9E43-6FF15E7805E3"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "865A6411-846A-4B85-B8F8-21CF1BD7C895"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E1DFD79-E9F9-430A-80CC-0F34B97FF809"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.0_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C7FA8D2-4213-4418-BB45-FC96473285FB"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.0_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFD0F3B8-3099-4EAA-91F2-A9CB9DDA0A33"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.0_rc3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45401494-4287-43CD-B3DE-03A448B8D521"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53CDA290-C76B-4C44-9E53-735ECA7F64FF"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2264499A-2C58-471F-9BBB-33C936B02522"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4D533CA-82F1-4210-941F-ECA34A7A67C4"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACEEECE9-9B37-446F-B92C-80C76E82500C"
},
{
"criteria": "cpe:2.3:a:mmbase:mmbase:1.7.4_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0A49DA5-1B86-43C0-941B-59200408F157"
}
],
"operator": "OR"
}
]
}
]