CVEvulnerability
CVE-2005-4044
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter.
Affected configurations
• mr. cgi guy amazon search directory (<= 1.0.0)
References
- http://pridels0.blogspot.com/2005/12/amazon-search-directory-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/17875 Vendor Advisory
- http://www.osvdb.org/21438 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2735 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23408 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2005/12/amazon-search-directory-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/17875 Vendor Advisory
- http://www.osvdb.org/21438 www.osvdb.org
- http://www.vupen.com/english/advisories/2005/2735 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23408 exchange.xforce.ibmcloud.com