CVE-2005-4670

Technical details about CVE-2005-4670 are not publicly provided in the connected documents. The description remains the only explicit detail; monitor for updates for affected products, versions, and fixes.

CVE-2005-4670: Undefined Security Weakness

Cross-site scripting XSS vulnerability in message.php in CityPost Automated Link Exchange LNKX allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2005-4670

Cross-site scripting XSS vulnerability in message.php in CityPost Automated Link Exchange LNKX allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CityPost PHP LNKX 52.0 - message.php Cross-Site Scripting

CityPost PHP LNKX 52.0 - message.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13255/info CityPost PHP LNKX is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'message.php'...

CityPost PHP LNKX 52.0 - 'message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13255/info CityPost PHP LNKX is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'message.php' script. An attacker may leverage this issue to have arbitrary...

CVE-2005-0930

CVE-2005-0930 is a documented XSS vulnerability in Chatness versions up to 2.5.1, exploitable via message.php by supplying input in the user field or the message parameter. Affected software is Chatness (≤2.5.1); the underlying issue is cross-site scripting that allows an attacker to inject arbit...

CVE-2005-0930: Undefined Security Weakness

Cross-site scripting XSS vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the user field or 2 the message parameter to message.php...

CVE-2002-0490: Undefined Security Weakness

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to 1 execute arbitrary POP commands via the id parameter in message.php, or 2 modify certain mail message headers via numerous parameters in write.php...

CVE-2002-0411: Undefined Security Weakness

Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line...