CVE-2005-0319

medium

Description

Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/19162

http://www.securityfocus.com/bid/12395

http://marc.info/?l=bugtraq&m=110692897003614&w=2

Details

Source: Mitre, NVD

Published: 2005-01-28

Updated: 2017-07-11

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity: Medium