Unscored CVE-2005-3073 EUVD-2005-3073GHSA-xgc7-jmvj-5fph

Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the…

Published Sep 27, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.

References

interchange-submit-itl-injection(22387) vdb-entry
14931 vdb-entry
16923 third-party-advisory
[interchange-announce] 20050922 Important: Security flaw found in Interchange demo catalog. mailing-list
[interchange-announce] 20050923 Important: Security flaw found in Interchange demo - Addendum mailing-list
19653 vdb-entry