Multiple XSS Vulnerabilities in ActiveBuyAndSell by ActiveBuyAndSell
CVE-2005-2063

Currently unrated

Key Information:

Vendor: Active Web Softwares
Status: Activebuyandsell
Vendor: CVE Published:; 29 June 2005

🔔 Create Active Web Softwares Vulnerability Alert

What is CVE-2005-2063?

ActiveBuyAndSell version 6.2 contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web scripts or HTML. These vulnerabilities can be exploited via the Title parameter in sendpassword.asp and the Keyword field on search.asp, potentially leading to unauthorized access and manipulation of the affected web applications. It is essential for users of this software to implement necessary security measures to mitigate these risks.

References

http://marc.info/?l=bugtraq&m=111963341429906&w=2

mailing-listx_refsource_BUGTRAQ

http://echo.or.id/adv/adv21-theday-2005.txt

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 29, 2005
Vulnerability Reserved
Jun 29, 2005

CVE-2005-2063 Data

JSON