Multiple Cross-Site Scripting Vulnerabilities in Active Auction House by Dujon Digital
CVE-2005-1030

Currently unrated

Key Information:

Vendor: Active Web Softwares
Status: Active Auction House
Vendor: CVE Published:; 2 May 2005

🔔 Create Active Web Softwares Vulnerability Alert

What is CVE-2005-1030?

Active Auction House has several cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web scripts or HTML into the application. The exploitation can occur through various parameters such as ReturnURL, username, and password, targeting multiple endpoints including account.asp and sendpassword.asp. This can lead to session hijacking, data theft, or other malicious activities against users of the platform.

References

http://www.osvdb.org/15287

vdb-entryx_refsource_OSVDB

http://www.securityfocus.com/bid/13038

vdb-entryx_refsource_BID

http://www.osvdb.org/15286

vdb-entryx_refsource_OSVDB

EPSS Score

5% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 2, 2005
Vulnerability Reserved
Apr 10, 2005

CVE-2005-1030 Data

JSON