CVE-2005-1030 Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (...
MediumCVSS 4.3
EPSS 5.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| active web softwares active auction house | = 7.1 | No fix listed |
References
- digitalparadox.org
- 20050406 Active Auction House has multiple Sql injection, error and XSS mailing-list
- 14839 exploit third-party-advisory vendor-advisory
- 15284 vdb-entry
- 15285 vdb-entry
- 15286 vdb-entry
- 15287 vdb-entry
- 13036 exploit vdb-entry
- 13038 exploit vdb-entry
- 13039 exploit vdb-entry
- 1013649 exploit vdb-entry
- aah-multiple-scripts-xss(19975) vdb-entry