CVE-2005-2392
Estado: ModificadaMedia (4.3)—
Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.41%
- Percentil entre todas las CVEs puntuadas: 72
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html
- http://secunia.com/advisories/16147
- http://securitytracker.com/id?1014556
- http://www.aria-security.net/advisory/cmsimple.txt
- http://www.cmsimple.dk/forum/viewtopic.php?t=2470
- http://www.osvdb.org/18128
- http://www.securityfocus.com/archive/1/442106/100/100/threaded
- http://www.securityfocus.com/bid/14346
- http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html
- http://secunia.com/advisories/16147
- http://securitytracker.com/id?1014556
- http://www.aria-security.net/advisory/cmsimple.txt
- http://www.cmsimple.dk/forum/viewtopic.php?t=2470
- http://www.osvdb.org/18128
- http://www.securityfocus.com/archive/1/442106/100/100/threaded
- http://www.securityfocus.com/bid/14346
JSON original (NVD)
Mostrar
{
"id": "CVE-2005-2392",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-07-27T04:00:00.000",
"references": [
{
"url": "http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/16147",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1014556",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.aria-security.net/advisory/cmsimple.txt",
"source": "cve@mitre.org"
},
{
"url": "http://www.cmsimple.dk/forum/viewtopic.php?t=2470",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/18128",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/442106/100/100/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/14346",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/16147",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1014556",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.aria-security.net/advisory/cmsimple.txt",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cmsimple.dk/forum/viewtopic.php?t=2470",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/18128",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/442106/100/100/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/14346",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function."
},
{
"lang": "es",
"value": "Vulnerabilidad de secuencia de comandos en sitios cruzados en index.php para CMSSimple 2.4 y anteriores permite que atacantes remotos inyecten script web arbitrario o HTML mediante el parámetro \"search\" en la función de búsqueda."
}
],
"lastModified": "2026-06-16T22:14:48.297",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43F7E5BD-553E-4731-BED1-7E7DB772AD82"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "574E610A-4799-45C9-B005-C1593B033AD9"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2FA0450-91E6-4250-A1D1-F2CFBB74A5B3"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DEC1EBC-1DBA-4350-8B34-7A872C62B6BC"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "078B102C-748B-4847-8413-71659982AF01"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CD2DC53-EA5E-41A3-A972-EE0CBE71A8C0"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA355EC8-6FDF-44AC-93AF-3BA62F933EF0"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77432D04-7A08-4897-9067-F1172C4B3444"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77BE8ADE-AD39-429F-BF60-AE403B653FB9"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DBC33E0-708B-497A-B3F7-33A525144256"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "221D0520-DAF7-4812-B94B-0E3630A967EB"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A477E39-3EB1-418F-9D55-E873815ADCF3"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2E86AAE-9DD4-426A-B004-794F6FD3571B"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF28FC3C-37D2-4468-A309-D5B71CA16BB3"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "264C0C12-D60B-4657-90B1-243F037F8B63"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1580903B-ED0B-4EFC-B1AF-982641D13B5A"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "882FBDD4-ADF3-457C-811A-DC02D0079F72"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CA83E3C-D14C-453A-B8A4-729C910D79D1"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3272B7A3-F5E6-469B-A308-56EDF7C831B9"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F2CC21-339B-4B38-AFD3-6CBA1A0BE61E"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.3:beta5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE9F185C-B41B-4E85-AB52-654738602581"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C67479D1-4D79-4819-9C70-24D9B146DB12"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94838957-A9DC-4155-B747-696B4E49B2DD"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA2C53DD-CDA9-4678-A933-54CD32B6F43D"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCB1C968-DE13-47E9-A0B1-E2DA1A1C8CD7"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4:beta5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "439F7115-7B8F-4A95-B748-795E7D1C80A8"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.4_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "311645A8-2614-4D07-AC73-A164BC5BFD68"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:beta_1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "467CF107-2801-4251-9223-38536E7EAA78"
},
{
"criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:beta_2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BAB9F8A-AB22-4A8F-9BF2-B58D9878B920"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}