CVE-2005-1403

Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

5.73% chance of exploitation in the next 30 days, 93rd percentile

Published

2005-05-03

Updated

2024-08-07

ExploitDB entries (4)

• https://www.exploit-db.com/exploits/25566
• https://www.exploit-db.com/exploits/25565
• https://www.exploit-db.com/exploits/25564
• https://www.exploit-db.com/exploits/25560

Security advisories

• http://secunia.com/advisories/15155
• http://www.osvdb.org/15894
• http://www.securityfocus.com/bid/13419
• http://www.securityfocus.com/bid/13425
• http://www.securityfocus.com/bid/13426
• http://www.securityfocus.com/bid/13427

References

• CVE Record
• NVD entry