CVEvulnerability

CVE-2005-4576

4.3 MEDIUM Published 2005-12-29 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-29
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) COUNTRYNAME, (2) EMAIL, and (3) FUELAP_TEMPLATENAME parameters.

Affected configurations

• fatwire updateengine (<= 6.2)

References

http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html pridels0.blogspot.com
http://secunia.com/advisories/18259 Vendor Advisory
http://www.osvdb.org/21936 www.osvdb.org
http://www.securityfocus.com/bid/16073 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23848 exchange.xforce.ibmcloud.com
http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html pridels0.blogspot.com
http://secunia.com/advisories/18259 Vendor Advisory
http://www.osvdb.org/21936 www.osvdb.org
http://www.securityfocus.com/bid/16073 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23848 exchange.xforce.ibmcloud.com