VulnerabilityModified
CVE-2005-0674
Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
MEDIUM 4.3EPSS 1.18%
Does this matter?
Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML via the text hidden parameter in an HTTP POST request.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.18% probability · 66th percentile
- CISA KEV
- Not listed
- Affected
- php arena/pabox
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=110987537431541&w=2
- http://secunia.com/advisories/14474Vendor Advisory
- http://securitytracker.com/id?1013363Vendor Advisory
- http://www.securityfocus.com/bid/12719Vendor Advisory
- http://marc.info/?l=bugtraq&m=110987537431541&w=2
- http://secunia.com/advisories/14474Vendor Advisory
- http://securitytracker.com/id?1013363Vendor Advisory
- http://www.securityfocus.com/bid/12719Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.