Vulnerabilities > CVE-2005-4231 - Input Validation vulnerability in Link Up Gold
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
php-web-scripts
Summary
Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] parameter to search.php in a search_links_advanced action, and the (3) direction or (4) sort parameter to articles.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |