Unscored CVE-2005-0336 EUVD-2005-0337GHSA-7rrw-63mm-qw38

Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web scr…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML.

References

12236 vdb-entry
1012838 vdb-entry
mediapartner-url-xss(18845) vdb-entry
13820 third-party-advisory
20050110 Portcullis Security Advisory 05-010 mailing-list