CVE-2005-3867

Published: Nov 29, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter, which is used when performing a search.

Affected (1)

Products: Wwwsearchsolutions: Revenuepilot Search Engine Script

Wwwsearchsolutions

1 product

Revenuepilot Search Engine Script

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wwwsearchsolutions Revenuepilot Search Engine Script	version ≤ 1.2.0

References (14)

http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17717

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21143

Source: cve@mitre.org

http://www.securityfocus.com/bid/15612

Source: cve@mitre.org

http://www.securityfocus.com/bid/16129

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2607

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23345

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html