medium4.3
CVE-2005-4420
Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified sea…
Impact
Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quicksquare Development | Honeycomb Archive Enterprise | Version 3.0 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
- http://secunia.com/advisories/18127
- http://www.osvdb.org/21828
- http://www.securityfocus.com/bid/15995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23831
- http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
- http://secunia.com/advisories/18127
- http://www.osvdb.org/21828
- http://www.securityfocus.com/bid/15995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23831