CVE-2005-4409

Published: Dec 20, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

Affected (16)

Products: Mmbase: Mmbase

Mmbase

1 product

Mmbase

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mmbase Mmbase	Version 1.5.1
Mmbase Mmbase	Version 1.6.0
Mmbase Mmbase	Version 1.6.1
Mmbase Mmbase	Version 1.6.2
Mmbase Mmbase	Version 1.6.3
Mmbase Mmbase	Version 1.6.4
Mmbase Mmbase	Version 1.6.5
Mmbase Mmbase	Version 1.7.0
Mmbase Mmbase	Version 1.7.0_rc1
Mmbase Mmbase	Version 1.7.0_rc2
Mmbase Mmbase	Version 1.7.0_rc3
Mmbase Mmbase	Version 1.7.1
Mmbase Mmbase	Version 1.7.2
Mmbase Mmbase	Version 1.7.3
Mmbase Mmbase	Version 1.7.4
Mmbase Mmbase	Version 1.7.4_rc1

References (6)

http://pridels0.blogspot.com/2005/12/mmbase-xss-vuln.html

Source: cve@mitre.org

http://www.osvdb.org/21868

Source: cve@mitre.org

http://www.securityfocus.com/bid/15955

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/mmbase-xss-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21868

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15955

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.