CVE-2005-4420 Information

Description

Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters possibly the keyword parameter in search.cfm.

Reference

http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html http://secunia.com/advisories/18127 http://www.osvdb.org/21828 http://www.securityfocus.com/bid/15995 https://exchange.xforce.ibmcloud.com/vulnerabilities/23831

Share on: