CVE-2005-3866

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-29 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search.

Affected products

Wwwsearchsolutions Searchfeed Search Engine: through 1.3.2

References

http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html
http://secunia.com/advisories/17715
http://www.osvdb.org/21144
http://www.securityfocus.com/bid/15612
http://www.vupen.com/english/advisories/2005/2609
https://exchange.xforce.ibmcloud.com/vulnerabilities/23348
http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html
http://secunia.com/advisories/17715
http://www.osvdb.org/21144
http://www.securityfocus.com/bid/15612
http://www.vupen.com/english/advisories/2005/2609
https://exchange.xforce.ibmcloud.com/vulnerabilities/23348

Get alerted when CVE-2005-3866 or the next vulnerability affects your stack