CVE-2005-0674 Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pabox | = 1.6 | No fix listed |
References
- 20050303 [XSS] paBox 1.6 mailing-list
- 14474 third-party-advisory vendor-advisory
- 1013363 vdb-entry vendor-advisory
- 12719 vdb-entry vendor-advisory