CVE-2005-3814

2005-11-2602:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.017

Percentile

87.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php.

References

nightmaresecurity.net/index.php?showtopic=1015

secunia.com/advisories/17736

securitytracker.com/id?1015259

www.addict3d.org/index.php?page=viewarticle&type=security&ID=5359

www.osvdb.org/21090

www.osvdb.org/21091

www.osvdb.org/21092

www.securityfocus.com/bid/15567

www.vupen.com/english/advisories/2005/2581