Cross-Site Scripting Vulnerability in Acuity CMS by Acuity
CVE-2005-4369

Currently unrated

Key Information:

Vendor: The Collective
Status: Acuity Cms
Vendor: CVE Published:; 20 December 2005

🔔 Create The Collective Vulnerability Alert

What is CVE-2005-4369?

A critical cross-site scripting vulnerability exists in version 2.6.2 of Acuity CMS, allowing attackers to inject arbitrary web scripts or HTML through specific search parameters, potentially including strSearchKeywords on the browse.asp page. This can lead to unauthorized actions or information theft if exploited, compromising the security of affected users.

References

http://www.securityfocus.com/bid/15934

vdb-entryx_refsource_BID

http://pridels0.blogspot.com/2005/12/acuity-cms-26x-asp-x...

x_refsource_MISC

http://secunia.com/advisories/18070

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 20, 2005
Vulnerability Reserved
Dec 20, 2005

CVE-2005-4369 Data

JSON