Vulnerability Details CVE-2005-3695
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.9%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/17587
- http://securitytracker.com/id?1015234
- http://www.osvdb.org/20908
- http://www.securiteam.com/unixfocus/6S00I1FEKY.html
- http://www.securityfocus.com/bid/15485
- http://www.vupen.com/english/advisories/2005/2457
- http://secunia.com/advisories/17587
- http://securitytracker.com/id?1015234
- http://www.osvdb.org/20908
- http://www.securiteam.com/unixfocus/6S00I1FEKY.html
- http://www.securityfocus.com/bid/15485
- http://www.vupen.com/english/advisories/2005/2457
Products affected by CVE-2005-3695
-
cpe:2.3:a:litespeed_technologies:litespeed_web_server:2.1.5