Vulnerabilities > CVE-2005-3292 - HTML Injection vulnerability in Xeobook 0.93

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

xeobook

NVD

Published: 2005-10-23

Updated: 2008-09-05

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as <b>.

Vulnerable Configurations

Part	Description	Count
Application	Xeobook Xeobook Xeobook 0.93	1

References

http://secunia.com/advisories/17159
http://www.securityfocus.com/bid/15086