CVE

Id
15685  
CVE No.
CVE-2005-4481  
Status
Candidate  
Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this vulnerability, stating that the "XSS flaw was only part of the custom implementation of the [polopoly] site". As of 20061003, CVE has no further information on this issue, except that the original researcher has a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package.  
Phase
Assigned (20051222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
123069 15685 CVE-2005-4481 VIM:20060926 vendor dispute: 21878: Polopoly Search Module XSS (fwd)  View
123070 15685 CVE-2005-4481 URL:http://attrition.org/pipermail/vim/2006-September/001056.html  View
123071 15685 CVE-2005-4481 MISC:http://pridels0.blogspot.com/2005/12/polopoly-xss-vuln.html  View
123072 15685 CVE-2005-4481 BID:16007  View
123073 15685 CVE-2005-4481 URL:http://www.securityfocus.com/bid/16007  View
123074 15685 CVE-2005-4481 OSVDB:21878  View

Related JVN