CVEvulnerability

CVE-2005-2488

4.3 MEDIUM Published 2005-08-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-08-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.

Affected configurations

• web content management web content management news system

References

http://secunia.com/advisories/16317 Vendor Advisory
http://securitytracker.com/id?1014616 Exploit
http://www.rgod.altervista.org/webc.html Exploit
http://www.securityfocus.com/bid/14464 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/21689 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/16317 Vendor Advisory
http://securitytracker.com/id?1014616 Exploit
http://www.rgod.altervista.org/webc.html Exploit
http://www.securityfocus.com/bid/14464 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/21689 exchange.xforce.ibmcloud.com