{"id":"CVE-2005-4294","aliases":[],"url":"https://o3.security/vulnerability/CVE-2005-4294","summary":"Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.","details":"Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.","published":"2005-12-16T11:03:00.000","modified":"2026-06-16T22:18:32.067","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0640.html"},{"type":"FIX","url":"http://secunia.com/advisories/18046"},{"type":"WEB","url":"http://securitytracker.com/id?1015365"},{"type":"FIX","url":"http://www.opencms.org/opencms/en/download/opencms.html"},{"type":"WEB","url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1910"},{"type":"WEB","url":"http://www.securityfocus.com/bid/15882"},{"type":"WEB","url":"http://www.vupen.com/english/advisories/2005/2923"},{"type":"WEB","url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0640.html"},{"type":"FIX","url":"http://secunia.com/advisories/18046"},{"type":"WEB","url":"http://securitytracker.com/id?1015365"},{"type":"FIX","url":"http://www.opencms.org/opencms/en/download/opencms.html"},{"type":"WEB","url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=1910"},{"type":"WEB","url":"http://www.securityfocus.com/bid/15882"},{"type":"WEB","url":"http://www.vupen.com/english/advisories/2005/2923"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-16T22:18:32.067"}}