CVE-2005-4576 Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) COUNTR...
MediumCVSS 4.3
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) COUNTRYNAME, (2) EMAIL, and (3) FUELAP_TEMPLATENAME parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fatwire updateengine | <= 6.2 | No fix listed |
References
- pridels0.blogspot.com
- 18259 third-party-advisory vendor-advisory
- 21936 vdb-entry
- 16073 exploit vdb-entry
- fatwire-updateengine-xss(23848) vdb-entry