CVE-2005-4481
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/12/2005
Last modified:
08/08/2024
Description
Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this vulnerability, stating that the "XSS flaw was only part of the custom implementation of the [polopoly] site". As of 20061003, CVE has no further information on this issue, except that the original researcher has a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package
Impact
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:polopoly:polopoly:*:*:*:*:*:*:*:* | 9.0 (including) |
To consult the complete list of CPE names with products and versions, see this page