VulnerabilityModified
CVE-2005-4306
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi.
MEDIUM 4.3EPSS 1.73%
Does this matter?
Lower severity and a low EPSS score (1.73%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.73% probability · 76th percentile
- CISA KEV
- Not listed
- Affected
- focalmedia.net/sitenet bbs
- Source
- cve@mitre.org
References
- http://pridels0.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html
- http://secunia.com/advisories/18090Vendor Advisory
- http://www.securityfocus.com/bid/15883
- http://www.vupen.com/english/advisories/2005/2939
- http://pridels0.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html
- http://secunia.com/advisories/18090Vendor Advisory
- http://www.securityfocus.com/bid/15883
- http://www.vupen.com/english/advisories/2005/2939
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.