CVE-2005-4284

MOYENNE 4.3CVE-2005-4284 · Published 16/12/2005 · updated 16/06/2026

En bref

CVE-2005-4284 est une vulnérabilité MOYENNE (CVSS 4.3) touchant staticstore (static store).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.3%, plus élevée que 70.5% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
staticstore static_store	`≤ 1.189a`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.

References

pridels0.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html
secunia.com/advisories/18037 · Vendor Advisory
osvdb.org/21714
osvdb.org/22032
securityfocus.com/bid/15895
vupen.com/english/advisories/2005/2915

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free