CVEvulnerability
CVE-2005-3967
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter.
Affected configurations
• atlassian confluence 2.0.1 build 321
References
- http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/17833 Patch, Vendor Advisory
- http://www.osvdb.org/21377 www.osvdb.org
- http://www.securityfocus.com/bid/15688 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2691 www.vupen.com
- http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/17833 Patch, Vendor Advisory
- http://www.osvdb.org/21377 www.osvdb.org
- http://www.securityfocus.com/bid/15688 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2691 www.vupen.com