PT-2005-1674 · 427Bb · 427Bb

Th3_R@V3N · Published 2005-03-01 · Updated 2017-07-11 · CVE-2005-0629

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 427BB version 2.2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the user or Avatar parameters in the profile.php file.

Recommendations For version 2.2, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting input for the user and Avatar parameters to minimize the risk of XSS attacks.

Exploit

Fix

Related Identifiers

CVE-2005-0629

Affected Products

427Bb

References · 8

• 🔥 https://exploit-db.com/exploits/25178 · Exploit
• http://secunia.com/advisories/14434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0629 · Security Note
• http://securitytracker.com/id?1013337 · Vendor Advisory
• http://securityfocus.com/bid/12693 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19546 · Note
• http://marc.info/?l=bugtraq&m=110970474726113&w=2 · Note
• http://marc.info/?l=bugtraq&m=110970911514167&w=2 · Note