CVE-2005-3866

Published: Nov 29, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search.

Affected (1)

Products: Wwwsearchsolutions: Searchfeed Search Engine

Wwwsearchsolutions

1 product

Searchfeed Search Engine

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wwwsearchsolutions Searchfeed Search Engine	version ≤ 1.3.2

References (12)

http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17715

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21144

Source: cve@mitre.org

http://www.securityfocus.com/bid/15612

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2609

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23348

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html