CVEvulnerability

CVE-2005-4383

4.3 MEDIUM Published 2005-12-20 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-20
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishYear, (3) docDescription, (4) publishState, (5) docAuthor, (6) docTitle, (7) subTopic, (8) topic, (9) topicRadio, (10) topicOnly, (11) startrow, and (12) sortby parameters.

Affected configurations

• citysoft community enterprise 4.x

References

http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html pridels0.blogspot.com
http://secunia.com/advisories/18145 secunia.com
http://www.osvdb.org/21856 www.osvdb.org
http://www.vupen.com/english/advisories/2005/2979 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23821 exchange.xforce.ibmcloud.com
http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html pridels0.blogspot.com
http://secunia.com/advisories/18145 secunia.com
http://www.osvdb.org/21856 www.osvdb.org
http://www.vupen.com/english/advisories/2005/2979 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23821 exchange.xforce.ibmcloud.com