Lucene search
MitreCVE-2005-0896HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0896
2005-05-0204:00:00
CWE-79
mitre
web.nvd.nist.gov
34
web security
xss
phpmydirectory
remote attack
code injection
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
61.1%
Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.
Affected configurations
Node
accomplishtechnologyphpmydirectoryMatch10.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| accomplishtechnology | phpmydirectory | 10.1.3 | cpe:2.3:a:accomplishtechnology:phpmydirectory:10.1.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2005-0896
2005-03-29 05:00:00
exploitdb
exploitdb
nessus
nessus
phpMyDirectory review.php subcat Parameter XSS
2005-03-25 00:00:00
nvd
nvd
CVE-2005-0896
2005-05-02 04:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
61.1%
Related for CVE-2005-0896