CVEvulnerability
CVE-2005-3552
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook.
Affected configurations
• phpkit phpkit (<= 1.6.1)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html cert.uni-stuttgart.de
- http://secunia.com/advisories/17479 secunia.com
- http://securitytracker.com/id?1015167 securitytracker.com
- http://www.hardened-php.net/advisory_212005.80.html Vendor Advisory
- http://www.osvdb.org/20553 www.osvdb.org
- http://www.osvdb.org/20554 www.osvdb.org
- http://www.osvdb.org/20555 www.osvdb.org
- http://www.osvdb.org/20556 www.osvdb.org
- http://www.osvdb.org/20557 www.osvdb.org
- http://www.osvdb.org/20558 www.osvdb.org
- http://www.osvdb.org/20559 www.osvdb.org
- http://www.securityfocus.com/bid/15354 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2344 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23003 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23004 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23006 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23007 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23008 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23009 exchange.xforce.ibmcloud.com
- http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html cert.uni-stuttgart.de
- http://secunia.com/advisories/17479 secunia.com
- http://securitytracker.com/id?1015167 securitytracker.com
- http://www.hardened-php.net/advisory_212005.80.html Vendor Advisory
- http://www.osvdb.org/20553 www.osvdb.org
- http://www.osvdb.org/20554 www.osvdb.org
- http://www.osvdb.org/20555 www.osvdb.org
- http://www.osvdb.org/20556 www.osvdb.org
- http://www.osvdb.org/20557 www.osvdb.org
- http://www.osvdb.org/20558 www.osvdb.org
- http://www.osvdb.org/20559 www.osvdb.org
- http://www.securityfocus.com/bid/15354 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2344 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23003 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23004 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23006 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23007 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23008 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23009 exchange.xforce.ibmcloud.com