CVEvulnerability
CVE-2005-3073
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-09-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.
Affected configurations
• interchange development group interchange 4.9.3
• interchange development group interchange 5.0
• interchange development group interchange 5.2
References
- http://secunia.com/advisories/16923 Patch, Vendor Advisory
- http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html Patch, Vendor Advisory
- http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html Patch
- http://www.osvdb.org/19653 www.osvdb.org
- http://www.securityfocus.com/bid/14931 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22387 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/16923 Patch, Vendor Advisory
- http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html Patch, Vendor Advisory
- http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html Patch
- http://www.osvdb.org/19653 www.osvdb.org
- http://www.securityfocus.com/bid/14931 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22387 exchange.xforce.ibmcloud.com