CVE-2005-1006

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.

References

Advisories
More

https://exchange.xforce.ibmcloud.com/vulnerabilities/19960

https://exchange.xforce.ibmcloud.com/vulnerabilities/19958

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1009

http://www.securityfocus.com/bid/12984

http://www.osvdb.org/15262

http://www.osvdb.org/15261

http://www.oliverkarow.de/research/SonicWall.txt

http://securitytracker.com/id?1013638

http://secunia.com/advisories/14823

http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.html

Details

Source: Mitre, NVD

Published: 2005-05-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N