CVE-2005-2324

{"id": "CVE-2005-2324", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-07-19T04:00:00.000", "references": [{"url": "http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php."}, {"lang": "es", "value": "Vulnerabilidad de secuencia de comandos en sitios cruzados en Clever Copy 2.0 y 2.0a permite que atacantes remotos inyecten script web arbitrario o HTML mediante los par\u00e1metros \"searchtype\" o \"searchterm\" en \"results.php\" o \"categorysearch.php\"."}], "lastModified": "2008-09-05T20:51:28.803", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F5DD585-BF9F-4AE5-B112-A6D9AB1ACDCC"}, {"criteria": "cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F4679FE-E971-435C-AED0-6E1DB3E561E0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}