CVE-2005-4177 Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter.
MediumCVSS 4.3
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cfmagic magic book personal | = 2.0 | No fix listed |
| cfmagic magic book professional | = 2.0 | No fix listed |
References
- pridels0.blogspot.com
- 17982 third-party-advisory
- 21529 exploit vdb-entry
- 15805 vdb-entry
- ADV-2005-2832 vdb-entry
- magicbookprofessional-book-xss(23521) vdb-entry