CVE-2005-4433 - Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remot

CVE-2005-4433

Summary

Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field.

References

http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html
http://secunia.com/advisories/18130
http://www.osvdb.org/21787
http://www.securityfocus.com/bid/15945
http://www.vupen.com/english/advisories/2005/2985

Vulnerable Configurations

cpe:2.3:a:esselbach_internet_solutions:esselbach_storyteller_cms:1.8:*:*:*:*:*:*:*
cpe:2.3:a:esselbach_internet_solutions:esselbach_storyteller_cms:1.8:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 08-03-2011 - 02:28)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	15945
misc	http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html
osvdb	21787
secunia	18130
vupen	ADV-2005-2985

Last major update

08-03-2011 - 02:28

Published

21-12-2005 - 01:03

Last modified

08-03-2011 - 02:28