Vulnerabilities > CVE-2005-3790 - Cross-Site Scripting vulnerability in PHPWCMS

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
phpwcms
exploit available
NVD
Published: 2005-11-24
Updated: 2016-10-18

Summary

Multiple cross-site scripting (XSS) vulnerabilities in act_newsletter.php in phpwcms 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) i and (2) text parameters.

Vulnerable Configurations

Part Description Count
Application
Phpwcms
1

Exploit-Db

descriptionPHPWCMS 1.2.5 -DEV Multiple Cross-Site Scripting Vulnerabilities. CVE-2005-3790 . Webapps exploit for php platform
idEDB-ID:26514
last seen2016-02-03
modified2005-11-15
published2005-11-15
reporterStefan Lochbihler
sourcehttps://www.exploit-db.com/download/26514/
titlePHPWCMS 1.2.5 -DEV - Multiple Cross-Site Scripting Vulnerabilities

References