CVE-2005-3638

Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in profile.php and (2) titles of posts.

Published Bycve@mitre.org

Published DateNov 16, 2005, 21:22

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://irannetjob.com/content/view/162/28/
http://secunia.com/advisories/17569
http://securitytracker.com/id?1015207
http://www.osvdb.org/20844
http://www.securityfocus.com/bid/15443
http://www.securityfocus.com/bid/15447
http://www.vupen.com/english/advisories/2005/2419

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE