Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2005-1189

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2005-1189
Last Modified 05 Sep 2008 04:48:28
Published 02 May 2005 12:00:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2005-1189

Summary

Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites.

Vulnerable Systems

Application

  • Webcamxp Pro 2.16.467


References

XF - webcamxp-chat-xss(20166)

SECTRACK - 1013753

SECUNIA - 14999


Last Updated: 27 May 2016 10:40:04