Unscored CVE-2005-0264 EUVD-2005-0265GHSA-9572-vgq7-c3wr

Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script …

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter.

References

20050101 Various Vulnerabilities in OWL Intranet Engine mailing-list
13695 third-party-advisory
12114 vdb-entry
owl-intranet-engine-xss(18705) vdb-entry