CVEvulnerability
CVE-2005-4785
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.
Affected configurations
• jl webworks quickblogger 1.4
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.html Exploit
- http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt exploitlabs.com
- http://secunia.com/advisories/15942 Vendor Advisory
- http://securitytracker.com/id?1014386 securitytracker.com
- http://www.securityfocus.com/bid/14152 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/0987 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21244 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.html Exploit
- http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt exploitlabs.com
- http://secunia.com/advisories/15942 Vendor Advisory
- http://securitytracker.com/id?1014386 securitytracker.com
- http://www.securityfocus.com/bid/14152 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/0987 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21244 exchange.xforce.ibmcloud.com