Vulnerability in Icms Content Management Systems

CVE-2005-4396

Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.

EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.

Affected products

References