CVE-2005-4878

MEDIUM 4.3CVE-2005-4878 · Published 18/02/2009 · updated 16/06/2026

In short

CVE-2005-4878 is a MEDIUM (CVSS 4.3) vulnerability affecting analysis console for intrusion databases (acid), basic analysis and security engine (secureideas).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
analysis console for intrusion databases acid	`= 0.9.6b20`	No fix yet
basic analysis and security engine secureideas	`= 1.2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrary web script or HTML via the sig[1] parameter and possibly other parameters, a different vulnerability than CVE-2007-6156.

References

More vulnerabilities in analysis console for intrusion databases

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free