CVEvulnerability
CVE-2005-0945
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.
Affected configurations
• asp press acs blog 1.1.1
Related
Referenced by CWE · observed example (1)
- CWE-83 Improper Neutralization of Script in Attributes in a Web Page weakness
References
- http://marc.info/?l=bugtraq&m=111214069029812&w=2 marc.info
- http://secunia.com/advisories/14744/ Exploit, Vendor Advisory
- http://securitytracker.com/id?1013584 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19864 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=111214069029812&w=2 marc.info
- http://secunia.com/advisories/14744/ Exploit, Vendor Advisory
- http://securitytracker.com/id?1013584 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19864 exchange.xforce.ibmcloud.com