CVE-2005-4502

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-22 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user.

Affected products

Net-Square Httprint: 202

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html
http://net-square.com/httprint/#history
http://secunia.com/advisories/18208
http://securitytracker.com/id?1015403
http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdf
http://www.securityfocus.com/archive/1/420101/100/0/threaded
http://www.securityfocus.com/bid/16031
http://www.vupen.com/english/advisories/2005/3070
https://exchange.xforce.ibmcloud.com/vulnerabilities/23885
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html
http://net-square.com/httprint/#history
http://secunia.com/advisories/18208

Get alerted when CVE-2005-4502 or the next vulnerability affects your stack