CVE-2005-0692

UNKNOWN

Cross-site scripting (XSS) vulnerability in fusion_core

Published Mar 8, 2005

Modified 2 years ago

Details

Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript.

References

WEB

http://marc.info/?l=bugtraq&m=111022851900028&w=2

ADVISORY

http://secunia.com/advisories/14492

WEB

http://www.php-fusion.co.uk/news.php?readmore=183

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2005-0692

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedMar 8, 2005

ModifiedAug 7, 2024