CVE-2005-3473
- State
- Published
- Severity
- Not scored
- Published
- Nov 3, 2005
- Updated
- Aug 7, 2024
- Reserved
- Nov 2, 2005
Description
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blog_text parameters (involving the temp_subject variable) in (a) preview_cgi.php and (b) preview_static_cgi.php, or (4) scheme_name parameter and (5) bg_color parameters (involving the preset_name and result variables) in (c) colors.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20051102 Simple PHP Blog: Multiple XSS Vulnerabilitiesmailing-list
- 138third-party-advisory
- http://www.seclab.tuwien.ac.at/advisories/TUVSA-0511-001.txt
- 20436vdb-entry
- 20437vdb-entry
- 17404third-party-advisory
- 20438vdb-entry
- 15283vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.