CVE-2005-3972

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-03 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Affected products

Extreme Corporate Extreme Search: through corporate_6.0

References

http://pridels0.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html
http://secunia.com/advisories/17816
http://www.osvdb.org/21336
http://www.securityfocus.com/bid/15675
http://www.vupen.com/english/advisories/2005/2687
http://pridels0.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html
http://secunia.com/advisories/17816
http://www.osvdb.org/21336
http://www.securityfocus.com/bid/15675
http://www.vupen.com/english/advisories/2005/2687

Get alerted when CVE-2005-3972 or the next vulnerability affects your stack