CVEvulnerability
CVE-2005-2392
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.
Affected configurations
• cmsmadesimple cms made simple 1.0
• cmsmadesimple cms made simple 1.1
• cmsmadesimple cms made simple 1.2
• cmsmadesimple cms made simple 1.3
• cmsmadesimple cms made simple 2.0
• cmsmadesimple cms made simple 2.1
• cmsmadesimple cms made simple 2.2
• cmsmadesimple cms made simple 2.3
• cmsmadesimple cms made simple 2.4
• cmsmadesimple cms made simple 2.4 beta
• cmsmadesimple cms made simple beta 1
• cmsmadesimple cms made simple beta 2
References
- http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html lostmon.blogspot.com
- http://secunia.com/advisories/16147 Vendor Advisory
- http://securitytracker.com/id?1014556 Patch
- http://www.aria-security.net/advisory/cmsimple.txt www.aria-security.net
- http://www.cmsimple.dk/forum/viewtopic.php?t=2470 Patch
- http://www.osvdb.org/18128 www.osvdb.org
- http://www.securityfocus.com/archive/1/442106/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/14346 Patch
- http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html lostmon.blogspot.com
- http://secunia.com/advisories/16147 Vendor Advisory
- http://securitytracker.com/id?1014556 Patch
- http://www.aria-security.net/advisory/cmsimple.txt www.aria-security.net
- http://www.cmsimple.dk/forum/viewtopic.php?t=2470 Patch
- http://www.osvdb.org/18128 www.osvdb.org
- http://www.securityfocus.com/archive/1/442106/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/14346 Patch