CVE-2005-3073 Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interchange development group interchange | = 4.9.3 | No fix listed |
| interchange development group interchange | = 5.0 | No fix listed |
| interchange development group interchange | = 5.2 | No fix listed |
References
- 16923 patch third-party-advisory vendor-advisory
- [interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog. mailing-list patch vendor-advisory
- [interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum mailing-list patch
- 19653 vdb-entry
- 14931 vdb-entry
- interchange-submit-itl-injection(22387) vdb-entry