CVE-2005-3967

Atlassian Confluence 2.0.1 Build 321 - Cross-Site Scripting via searchQuery.queryString Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15688
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21377
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17833
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2691

Scores

EPSS 0.0039
EPSS Percentile 60.3%

Details

Status published
Products (1)
atlassian/confluence 2.0.1_build_321
Published Dec 03, 2005
Tracked Since Feb 18, 2026