CVEvulnerability
CVE-2005-4502
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user.
Affected configurations
• net-square httprint 202
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html lists.grok.org.uk
- http://net-square.com/httprint/#history net-square.com
- http://secunia.com/advisories/18208 secunia.com
- http://securitytracker.com/id?1015403 securitytracker.com
- http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/420101/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16031 Exploit, Patch
- http://www.vupen.com/english/advisories/2005/3070 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23885 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html lists.grok.org.uk
- http://net-square.com/httprint/#history net-square.com
- http://secunia.com/advisories/18208 secunia.com
- http://securitytracker.com/id?1015403 securitytracker.com
- http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/420101/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16031 Exploit, Patch
- http://www.vupen.com/english/advisories/2005/3070 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23885 exchange.xforce.ibmcloud.com