Multiple Cross-Site Scripting Vulnerabilities in Zomplog by Zomplog
CVE-2005-3308

Currently unrated

Key Information:

Vendor

Zomplog

Status
Vendor
CVE Published:
26 October 2005

What is CVE-2005-3308?

Zomplog 3.4 is susceptible to multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web scripts or HTML. These vulnerabilities can be exploited through various parameters including the name or comment parameters in detail.php, the username parameter in get.php, and the search parameter in index.php. Exploiting these weaknesses can result in unauthorized access and manipulation of user data, posing significant risks to website security.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2005-3308 : Multiple Cross-Site Scripting Vulnerabilities in Zomplog by Zomplog