CVE-2005-2202

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15970Patch, Vendor Advisory
http://securitytracker.com/id?1014429Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdfPatch, Vendor Advisory
http://secunia.com/advisories/15970Patch, Vendor Advisory
http://securitytracker.com/id?1014429Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_006.pdfPatch, Vendor Advisory

Timeline

Published: Jul 11, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-22037.5login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.CVE-2005-22044.3Cross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO,"CVE-2005-22057.5The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query st CVE-2005-22067.5Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFr CVE-2005-22074.3Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via th CVE-2005-22085.0PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.CVE-2005-22095.5Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by CVE-2005-22107.5Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL.CVE-2005-22114.6Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is bu CVE-2005-22126.4Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read t CVE-2005-22137.5Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code CVE-2005-22144.6apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information