CVEvulnerability
CVE-2005-4057
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name parameters.
Affected configurations
• jonathan beckett pluggedout nexus 0.1
References
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html pridels0.blogspot.com
- http://secunia.com/advisories/17909 secunia.com
- http://www.osvdb.org/21479 www.osvdb.org
- http://www.securityfocus.com/bid/15724 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2751 www.vupen.com
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html pridels0.blogspot.com
- http://secunia.com/advisories/17909 secunia.com
- http://www.osvdb.org/21479 www.osvdb.org
- http://www.securityfocus.com/bid/15724 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2751 www.vupen.com