CVE-2005-0336 - Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .

Published Feb 10, 2005

4.3

MEDIUM

CVSS 2.0

EPSS 1.18%

Description

Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://marc.info/?l=bugtraq&m=110547214224714&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/13820
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1012838
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/12236
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0337
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18845
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=110547214224714&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/13820		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1012838		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/12236		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0337		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18845		vdb-entryx_refsource_XF