CVE-2005-4307

Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.03% chance of exploitation in the next 30 days, 81st percentile

Published

2005-12-17

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/26863
• https://www.exploit-db.com/exploits/26862
• https://www.exploit-db.com/exploits/26861

Security advisories

• http://secunia.com/advisories/18084
• http://www.securityfocus.com/bid/15915

References

• CVE Record
• NVD entry