CVE-2005-4299

Sažetak

Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) before and (2) ct parameters.

Reference

http://pridels0.blogspot.com/2005/12/atlant-pro-xss-vuln.html
http://secunia.com/advisories/18095
http://www.securityfocus.com/bid/15886
http://www.vupen.com/english/advisories/2005/2934

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

08-03-2011 - 02:27

Objavljeno

16-12-2005 - 23:03