CVE-2005-4555 Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ENTER_ARTICLE_TITLE, (2) SPE...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ENTER_ARTICLE_TITLE, (2) SPECIFY_ZONE, (3) ENTER_ARTICLE_HEADER, and (4) ENTER_ARTICLE_BODY indices in the language array parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dev web management system | = 1.5 | No fix listed |
References
- rgod.altervista.org exploit
- 18239 exploit third-party-advisory vendor-advisory
- 1015410 exploit vdb-entry
- 22043 vdb-entry
- 20051224 Dev web management system <= 1.5 SQL injection / cross site scripting mailing-list
- 16063 exploit vdb-entry
- dev-add-xss(23900) vdb-entry