exploitDog

CVE-2005-3866

Опубликовано: 29 нояб. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wwwsearchsolutions:searchfeed_search_engine:*:*:*:*:*:*:*:*

Версия до 1.3.2 (включая)

EPSS

Процентиль: 70%

0.00622

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qqwr-fprh-7x5m

github

почти 4 года назад

Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search.

EPSS

Процентиль: 70%

0.00622

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other