Unrated severityNVD Advisory· Published Nov 26, 2005· Updated Apr 16, 2026
CVE-2005-3834
CVE-2005-3834
Description
Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.
Affected products
13cpe:2.3:a:tunez:tunez:0.1:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:tunez:tunez:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:1.15:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:1.20:*:*:*:*:*:*:*
- cpe:2.3:a:tunez:tunez:1.21:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/17692nvdExploitVendor Advisory
- www.osvdb.org/21063nvdExploit
- www.securityfocus.com/bid/15548nvdExploit
- pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.htmlnvd
- www.vupen.com/english/advisories/2005/2556nvd
News mentions
0No linked articles in our index yet.