CVE-2005-4496 Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| forum one syntaxcms | <= 1.2.1 | No fix listed |
References
- pridels0.blogspot.com
- 18207 third-party-advisory
- 21859 vdb-entry
- 16033 vdb-entry
- ADV-2005-3054 vdb-entry