CVE Vulnerabilities

CVE-2005-4305

Published: Dec 17, 2005 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.

Affected Software

Name Vendor Start Version End Version
Trac Edgewall_software 0.9 (including) 0.9 (including)
Trac Edgewall_software 0.9.1 (including) 0.9.1 (including)
Trac Edgewall_software 0.9.2 (including) 0.9.2 (including)

References