Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2005-4551

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2005-4551
Last Modified 05 Sep 2008 04:57:10
Published 28 Dec 2005 06:03:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2005-4551

Summary

Cross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable is on, allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php.

Vulnerable Systems

Application

  • Simpbook 1.0


References

BID - 16053

SECUNIA - 18256

FULLDISC - 20051223 html in simpbook

BID - 16058


Last Updated: 27 May 2016 10:41:20