CVE-2005-2416

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21487

https://exchange.xforce.ibmcloud.com/vulnerabilities/21484

http://www.securityfocus.com/bid/14352

http://www.osvdb.org/18169

http://www.osvdb.org/18168

http://securitytracker.com/id?1014554

http://secunia.com/advisories/16169

http://marc.info/?l=bugtraq&m=112206702015439&w=2

Details

Source: Mitre, NVD

Published: 2005-08-03

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N