Lucene search

MitreCVE-2005-2980

HistorySep 20, 2005 - 12:03 a.m.

CVE-2005-2980

2005-09-2000:03:00

mitre

web.nvd.nist.gov

vulnerability

xss

phpoutsourcing noah's classifieds

index.php

remote attackers

web script

html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.007

Percentile

80.5%

JSON

Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah’s classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter.

Affected configurations

Nvd

Node

phpoutsourcingnoahs_classifiedsMatch1.3

VendorProductVersionCPE
phpoutsourcingnoahs_classifieds1.3cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpoutsourcing	noahs_classifieds	1.3	cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:::::::*

References

marc.info/?l=bugtraq&m=112680539610442&w=2

secunia.com/advisories/16826/

www.irannetjob.com/index.php?option=com_content&task=view&id=122&Itemid=28

www.securityfocus.com/bid/14835

exchange.xforce.ibmcloud.com/vulnerabilities/22274

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.007

Percentile

80.5%

JSON

Related for CVE-2005-2980