CVE-2005-4878: Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrus...

Security readout for executives and security teams

This is an old cross-site scripting issue in ACID and BASE intrusion analysis consoles. A remote attacker could inject script or HTML through the sig[1] parameter, and possibly other parameters, if a vulnerable console is reachable. Business urgency depends on whether these legacy tools still exist in your environment. Exposure is most likely in legacy IDS database web consoles running ACID 0.9.6b20 or BASE 1.2. Risk increases if the console is internet-accessible or broadly reachable internally. The source bundle does not identify modern affected versions or CPEs. Treat this as a legacy exposure check rather than an emergency unless affected consoles are still deployed. Prioritize finding and isolating these systems because IDS consoles may be trusted by security staff and often contain sensitive operational context. Mitigation focus: Inventory ACID and BASE consoles and confirm exact versions.; Review Debian DSA-893 and vendor guidance for applicable fixes.; Upgrade, replace, or retire affected legacy console software..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.