CVE-2005-4433

Published: Dec 21, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field.

Affected (1)

Products: Esselbach Internet Solutions: Esselbach Storyteller Cms

Esselbach Internet Solutions

1 product

Esselbach Storyteller Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Esselbach Internet Solutions Esselbach Storyteller Cms	Version 1.8

References (10)

http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/18130

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21787

Source: cve@mitre.org

http://www.securityfocus.com/bid/15945

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2985

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/esselbach-storyteller-cms-xss-vuln.html