Cross-site Scripting Vulnerability in Lutece by Atnou
CVE-2005-4401

Currently unrated

Key Information:

Vendor: Lutece
Status: Lutece
Vendor: CVE Published:; 20 December 2005

What is CVE-2005-4401?

Lutece versions 1.2.3 and earlier are susceptible to a cross-site scripting (XSS) vulnerability, allowing remote attackers to inject arbitrary web scripts or HTML into web pages. This security flaw arises from unsanitized input via various search parameters, which can potentially lead to unauthorized actions on behalf of users, compromising the integrity of the web application.

References

http://www.securityfocus.com/bid/15953

vdb-entryx_refsource_BID

http://pridels0.blogspot.com/2005/12/lutece-xss-vuln.html

x_refsource_MISC

http://secunia.com/advisories/18114

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 20, 2005
Vulnerability Reserved
Dec 20, 2005

CVE-2005-4401 Data

JSON