VulnerabilityModified
CVE-2005-1672
Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the (1) find parameter to index.php, (2) name or (3) message field of a chat request, or (4) the message body when…
MEDIUM 4.3EPSS 2.71%
Does this matter?
Lower severity and a low EPSS score (2.71%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the (1) find parameter to index.php, (2) name or (3) message field of a chat request, or (4) the message body when opening a trouble ticket.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 2.71% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- ubertec/help center live
- Source
- cve@mitre.org
References
- http://www.gulftech.org/?node=research&article_id=00076-05172005
- http://www.securityfocus.com/archive/1/398457Exploit, Patch, Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00076-05172005
- http://www.securityfocus.com/archive/1/398457Exploit, Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.