CVE-2005-4191

Опубликовано: 13 дек. 2005

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist.

Ссылки

http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h
Patch
http://lists.horde.org/archives/announce/2005/000236.html
Patch
http://secunia.com/advisories/17969
Patch
Vendor Advisory
http://www.sec-consult.com/245.html
Vendor Advisory
http://www.securityfocus.com/bid/15804
http://www.vupen.com/english/advisories/2005/2836
http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h
Patch
http://lists.horde.org/archives/announce/2005/000236.html
Patch
http://secunia.com/advisories/17969
Patch
Vendor Advisory
http://www.sec-consult.com/245.html
Vendor Advisory
http://www.securityfocus.com/bid/15804
http://www.vupen.com/english/advisories/2005/2836

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:horde:nag_task_list_manager_h3:1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:2.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:nag_task_list_manager_h3:2.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00371

Низкий

3.5 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-4191

ubuntu

больше 19 лет назад

CVE-2005-4191

debian

больше 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in templates/taskl ...

GHSA-9r8f-8mgm-rgr6

github

больше 3 лет назад

EPSS

Процентиль: 58%

0.00371

Низкий

3.5 Low

CVSS2

Дефекты

NVD-CWE-Other