CVE-2005-2441 Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to lo...
MediumCVSS 4.3
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vbzoom | All versions | No fix listed |
References
- 20050729 VBZoom Cross Site Scripting Vulnerabilities mailing-list
- 16220 third-party-advisory
- 1014614 vdb-entry
- 18662 vdb-entry
- 18663 vdb-entry
- 20060306 SQL injection & XSS IN vbzoom v1.11 mailing-list
- 14423 vdb-entry
- vbzoom-profile-login-xss(21680) vdb-entry