CVE

Id
15602  
CVE No.
CVE-2005-4398  
Status
Candidate  
Description
** DISPUTED ** NOTE: the vendor has disputed this issue. Cross-site scripting (XSS) vulnerability in lemoon 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. NOTE: the vendor has disputed this issue, saying "Sites are built on top of ASP.NET and you use lemoon core objects to easily manage and render content. The XSS vuln. you are referring to exists in one of our public sites built on lemoon i.e. a custom made site (as all sites are). The problem exists in a UserControl that handles form input and is in no way related to the lemoon core product."  
Phase
Assigned (20051220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
122396 15602 CVE-2005-4398 MISC:http://pridels0.blogspot.com/2005/12/lemoon-xss-vuln.html  View
122397 15602 CVE-2005-4398 BID:15949  View
122398 15602 CVE-2005-4398 URL:http://www.securityfocus.com/bid/15949  View
122399 15602 CVE-2005-4398 OSVDB:21820  View
122400 15602 CVE-2005-4398 URL:http://www.osvdb.org/21820  View
122401 15602 CVE-2005-4398 SECUNIA:18119  View

Related JVN