CVEvulnerability
CVE-2005-1030
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.
Affected configurations
• active web softwares active auction house 7.1
References
- http://digitalparadox.org/advisories/aass.txt digitalparadox.org
- http://marc.info/?l=bugtraq&m=111280834000432&w=2 marc.info
- http://secunia.com/advisories/14839 Exploit, Vendor Advisory
- http://www.osvdb.org/15284 www.osvdb.org
- http://www.osvdb.org/15285 www.osvdb.org
- http://www.osvdb.org/15286 www.osvdb.org
- http://www.osvdb.org/15287 www.osvdb.org
- http://www.securityfocus.com/bid/13036 Exploit
- http://www.securityfocus.com/bid/13038 Exploit
- http://www.securityfocus.com/bid/13039 Exploit
- http://www.securitytracker.com/alerts/2005/Apr/1013649.html Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19975 exchange.xforce.ibmcloud.com
- http://digitalparadox.org/advisories/aass.txt digitalparadox.org
- http://marc.info/?l=bugtraq&m=111280834000432&w=2 marc.info
- http://secunia.com/advisories/14839 Exploit, Vendor Advisory
- http://www.osvdb.org/15284 www.osvdb.org
- http://www.osvdb.org/15285 www.osvdb.org
- http://www.osvdb.org/15286 www.osvdb.org
- http://www.osvdb.org/15287 www.osvdb.org
- http://www.securityfocus.com/bid/13036 Exploit
- http://www.securityfocus.com/bid/13038 Exploit
- http://www.securityfocus.com/bid/13039 Exploit
- http://www.securitytracker.com/alerts/2005/Apr/1013649.html Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19975 exchange.xforce.ibmcloud.com