CVEvulnerability
CVE-2005-4284
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.
Affected configurations
• static store staticstore (<= 1.189a)
References
- http://pridels0.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html pridels0.blogspot.com
- http://secunia.com/advisories/18037 Vendor Advisory
- http://www.osvdb.org/21714 www.osvdb.org
- http://www.osvdb.org/22032 www.osvdb.org
- http://www.securityfocus.com/bid/15895 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2915 www.vupen.com
- http://pridels0.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html pridels0.blogspot.com
- http://secunia.com/advisories/18037 Vendor Advisory
- http://www.osvdb.org/21714 www.osvdb.org
- http://www.osvdb.org/22032 www.osvdb.org
- http://www.securityfocus.com/bid/15895 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2915 www.vupen.com