Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5...

4.3 CVSS

Vulnerability Description

Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4072

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from cfmagic

View All →

CVE-2005-4177

Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal...

Medium 4.3

CVE-2005-4073

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro...

High 7.5

CVE-2005-4071

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5...

High 7.5

Affected Vendor

cfmagic

View all reports →

Affected Software

magic forum personal

Vulnerable Versions:

Timeline

Official Publish: December 8th, 2005

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.