CVEvulnerability
CVE-2005-4433
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field.
Affected configurations
• esselbach internet solutions esselbach storyteller cms 1.8
References
- http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/18130 Vendor Advisory
- http://www.osvdb.org/21787 www.osvdb.org
- http://www.securityfocus.com/bid/15945 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2985 www.vupen.com
- http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/18130 Vendor Advisory
- http://www.osvdb.org/21787 www.osvdb.org
- http://www.securityfocus.com/bid/15945 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2985 www.vupen.com