CVE-2005-4396

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-20 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.

Affected products

Icms Content Management Systems Icms: all versions

References

http://secunia.com/advisories/18085
http://www.osvdb.org/21809
http://secunia.com/advisories/18085
http://www.osvdb.org/21809

Get alerted when CVE-2005-4396 or the next vulnerability affects your stack