CVE-2005-3514 Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to (1) newtopic.php, (2) quote.php,...
MediumCVSS 4.3
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to (1) newtopic.php, (2) quote.php, (3) index.php, and (4) reply.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chipmunk scripts chipmunk forum | All versions | No fix listed |
References
- irannetjob.com url-repurposed
- 20051020 XSS & Path Disclosure in Chipmunk's products mailing-list
- 17239 third-party-advisory vendor-advisory
- 96 third-party-advisory
- 20164 vdb-entry
- 20165 vdb-entry
- 20166 vdb-entry
- 20167 vdb-entry
- 15149 exploit vdb-entry
- chipmunk-multiple-scripts-xss(22823) vdb-entry