CVE-2005-2563 - Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attack

CVE-2005-2563

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php or (2) the template.

References

http://marc.info/?l=bugtraq&m=112351740803443&w=2
http://securitytracker.com/alerts/2005/Aug/1014631.html
http://www.securityfocus.com/bid/14497

Vulnerable Configurations

cpe:2.3:a:gravity_board_x_development_team:gravity_board_x:1.1:*:*:*:*:*:*:*
cpe:2.3:a:gravity_board_x_development_team:gravity_board_x:1.1:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 18-10-2016 - 03:28)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	14497
bugtraq	20050807 Gravity Board X v1.1 multiple vulnerabilities
sectrack	1014631

Last major update

18-10-2016 - 03:28

Published

16-08-2005 - 04:00

Last modified

18-10-2016 - 03:28