CVE-2005-4307

Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.03% chance of exploitation in the next 30 days, 80th percentile

Published

2005-12-17

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/26863
• https://www.exploit-db.com/exploits/26862
• https://www.exploit-db.com/exploits/26861

References

• CVE Record
• NVD entry

Related

• CVE-2005-4306
• CVE-2005-4311
• CVE-2005-4303
• CVE-2005-4314
• CVE-2005-4302
• CVE-2005-4316