Lucene search
HistoryApr 22, 2005 - 4:00 a.m.
CVE-2005-1285
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.7
Confidence
High
EPSS
0.007
Percentile
80.4%
Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.
Affected configurations
Node
woltlabburning_boardRange≤2.3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| woltlab | burning_board | * | cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2005-1285
2005-04-26 04:00:00
cvelist
cvelist
CVE-2005-1285
2005-04-26 04:00:00
exploitdb
exploitdb
WoltLab Burning Board 2.3.1 - 'thread.php' Cross-Site Scripting
2005-04-22 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.7
Confidence
High
EPSS
0.007
Percentile
80.4%
Related for NVD:CVE-2005-1285