Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab ("%09") character, which prevents the rest of the query from being properly sanitized.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://securitytracker.com/alerts/2005/Jan/1012805.html | vdb-entry x_refsource_SECTRACK |
| http://securitytracker.com/alerts/2005/Jan/1012802.html | vdb-entry x_refsource_SECTRACK |
| http://www.debian.org/security/2005/dsa-627 | vendor-advisory x_refsource_DEBIAN |
| http://secunia.com/advisories/13600 | third-party-advisory x_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18623 | vdb-entry x_refsource_XF |
| http://www.namazu.org/security.html.en#xss-tab | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/12053 | vdb-entry x_refsource_BID |
| http://www.novell.com/linux/security/advisories/2005_01_sr.html | vendor-advisory x_refsource_SUSE |
| http://www.linuxsecurity.com/content/view/117604/102/ | vendor-advisory x_refsource_FEDORA |
| http://jvn.jp/jp/JVN%23904429FE.html | x_refsource_MISC |
| http://www.osvdb.org/12516 | vdb-entry x_refsource_OSVDB |
| http://www.securityfocus.com/advisories/9028 | vendor-advisory x_refsource_HP |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|