Lucene search
HistoryMar 30, 2005 - 5:00 a.m.
CVE-2005-0485
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.9 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.4%
Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter.
Affected configurations
Node
phparenapanewsMatch2.0b4
Related
cve
cve
CVE-2005-0485
2005-03-30 05:00:00
cvelist
cvelist
CVE-2005-0485
2005-02-19 05:00:00
nessus
nessus
paNews comment.php showpost Parameter XSS
2005-02-16 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.9 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.4%
Related for NVD:CVE-2005-0485