NVD

Id
69383  
Name
CVE-2005-3745  
Description
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-11-22  
Modified Date
2011-03-07  
Seq
2005-3745  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
358771 69383 CVE-2005-3745 197  View
358772 69383 CVE-2005-3745 1015257  View
358773 69383 CVE-2005-3745 http://www.hacktics.com/AdvStrutsNov05.html  View
358774 69383 CVE-2005-3745 RHSA-2006:0157  View
358775 69383 CVE-2005-3745 RHSA-2006:0161  View
358776 69383 CVE-2005-3745 20051121 Security Advisory: Struts Error Message Cross Site Scripting  View
358777 69383 CVE-2005-3745 15512  View
358778 69383 CVE-2005-3745 ADV-2005-2525  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62651 JVNDB-2005-000894 Apache Struts におけるクロスサイトスクリプティングの脆弱性 Apache Struts にはクロスサイトスクリプティングの脆弱性が存在します。 CVE-2005-3745 14947 CVE-2005-3745 69383 4.3 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000894.html 2005-11-22 2011-06-10 View