Lucene search

MitreCVE-2005-0650

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0650

2005-05-0204:00:00

mitre

web.nvd.nist.gov

cve-2005-0650

cross-site scripting

xss

projectbb 0.4.5.1

remote attackers

web script injection

html injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.009

Percentile

83.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as “drivers.php” by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.

Affected configurations

Nvd

Node

projectbbprojectbbMatch0.4.5.1

VendorProductVersionCPE
projectbbprojectbb0.4.5.1cpe:2.3:a:projectbb:projectbb:0.4.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
projectbb	projectbb	0.4.5.1	cpe:2.3:a:projectbb:projectbb:0.4.5.1:::::::*

References

marc.info/?l=bugtraq&m=111031893610270&w=2

secunia.com/advisories/14533

securitytracker.com/id?1013332

www.securityfocus.com/bid/12709

www.vupen.com/english/advisories/2005/0223

exchange.xforce.ibmcloud.com/vulnerabilities/19556

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.009

Percentile

83.2%

JSON

Related for CVE-2005-0650