CVE-2005-2894 - Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earli

CVE-2005-2894

Summary

Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field.

References

http://marc.info/?l=bugtraq&m=112611338417979&w=2
http://www.securityfocus.com/bid/14766
https://exchange.xforce.ibmcloud.com/vulnerabilities/22190

Vulnerable Configurations

cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*
cpe:2.3:a:pblang:pblang:4.65:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 11-07-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	14766
bugtraq	20050907 PBLang 4.65 (possibly prior versions) remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure
xf	pblang-setcookie-xss(22190)

Last major update

11-07-2017 - 01:33

Published

14-09-2005 - 20:03

Last modified

11-07-2017 - 01:33