CVE-2005-1075 Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3...
MediumCVSS 4.3
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radscripts radbids | = 2 | No fix listed |
References
- 14906 third-party-advisory vendor-advisory
- www.digitalparadox.org
- 15430 vdb-entry
- 15431 exploit vdb-entry
- 20050409 Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2 mailing-list vendor-advisory
- 13080 exploit vdb-entry
- radbids-gold-php-xss(20038) vdb-entry