CVE-2005-4574

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.1270%

EPSS Percentile11.58th

Published2005年12月29日

Last Modified2026年4月16日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter.

Affected Platforms (CPE)

📦

Paperthin

Commonspot Content Server

<= 4.5

📦

Paperthin

Commonspot Content Server

= 2.5

📦

Paperthin

Commonspot Content Server

= 3.0

📦

Paperthin

Commonspot Content Server

= 3.2

📦

Paperthin

Commonspot Content Server

= 4.0

References & Advisories

🔗 http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html

🔗 http://secunia.com/advisories/18257

🔗 http://www.osvdb.org/21931

🔗 http://www.securityfocus.com/bid/16071

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/23864

🔗 http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html

🔗 http://secunia.com/advisories/18257

🔗 http://www.osvdb.org/21931

Vulnerability Description

Affected Platforms (CPE)

Commonspot Content Server

Commonspot Content Server

Commonspot Content Server

Commonspot Content Server

Commonspot Content Server

References & Advisories

関連する脆弱性情報