CVE-2005-1233 Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters.
MediumCVSS 4.3
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php labs profile | All versions | No fix listed |
References
- 15027 third-party-advisory vendor-advisory
- 1013756 vdb-entry vendor-advisory
- 15697 vdb-entry vendor-advisory
- 13276 exploit vdb-entry vendor-advisory
- 13282 exploit vdb-entry vendor-advisory
- www.snkenjoi.com vendor-advisory
- ADV-2005-0370 vdb-entry
- profile-indexphp-xss(20169) vdb-entry