CVE-2005-2453 Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via t...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| networkactiv web server | = 1.0 | No fix listed |
| networkactiv web server | = 2.0.0.6 | No fix listed |
| networkactiv web server | = 3.0.1.1 | No fix listed |
| networkactiv web server | = 3.5.13 | No fix listed |
References
- 16301 patch third-party-advisory vendor-advisory
- secunia.com patch vendor-advisory
- 1014624 vdb-entry
- 18525 vdb-entry
- 14473 vdb-entry
- networkactiv-xss(21696) vdb-entry