CVE-2005-2653

Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.38% chance of exploitation in the next 30 days, 72nd percentile

Published

2005-08-21

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/408503

Security advisories

• http://secunia.com/advisories/16503
• http://www.securityfocus.com/bid/14602

References

• CVE Record
• NVD entry