CVE-2005-0675 Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.
MediumCVSS 4.3
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpoutsourcing zorum | = 3.3 | No fix listed |
| phpoutsourcing zorum | = 3.4 | No fix listed |
| phpoutsourcing zorum | = 3.5 | No fix listed |