Unscored severity · published Dec 3, 2005
CVE-2005-3967
Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Confluence · Atlassian
2.0.1_build_321 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3967
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3967
pridels0.blogspot.com
http://pridels0.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html
Patch
http://secunia.com/advisories/17833
www.osvdb.org
http://www.osvdb.org/21377
www.securityfocus.com
http://www.securityfocus.com/bid/15688
www.vupen.com
http://www.vupen.com/english/advisories/2005/2691
More from Confluence
9.8
CVE-2023-22527
Atlassian Confluence Data Center and Server Template Injection Vulnerability
9.8
CVE-2023-22518
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
9.8
CVE-2023-22515
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
9.8
CVE-2022-26138
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
9.8
CVE-2022-26134
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability