Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-0549

5 documents5 sources

Severity

4.3MEDIUM

EPSS

0.4%

top 36.75%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN Solaris Answerbook2

Timeline

PublishedMay 2

Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDsun/solaris_answerbook21.4.4

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-7mf7-2mr6-5j56: Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1↗2022-05-01

▶

CVEList

CVE-2005-0549: Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1↗2005-03-09

▶

💥Exploits & PoCs

Exploit-DB

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities↗2005-05-07

▶

💬Community

Bugzilla

CVE-2005-2933 imap buffer overflow↗2006-05-03

▶