CVE-2005-4574 Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow paramete...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paperthin commonspot content server | <= 4.5 | No fix listed |
| paperthin commonspot content server | = 2.5 | No fix listed |
| paperthin commonspot content server | = 3.0 | No fix listed |
| paperthin commonspot content server | = 3.2 | No fix listed |
| paperthin commonspot content server | = 4.0 | No fix listed |
References
- pridels0.blogspot.com
- 18257 third-party-advisory vendor-advisory
- 21931 exploit vdb-entry
- 16071 exploit vdb-entry
- commonspot-loader-xss(23864) vdb-entry