Vulnerabilities > CVE-2005-4365 - Cross-Site Scripting vulnerability in Flip 0.9.0.1029

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
flip
exploit available
NVD
Published: 2005-12-20
Updated: 2011-03-08

Summary

Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in text.php and (2) frame parameter in forum.php.

Vulnerable Configurations

Part Description Count
Application
Flip
1

Exploit-Db

  • descriptionFLIP 0.9 .0.1029 text.php name Parameter XSS. CVE-2005-4365. Webapps exploit for php platform
    idEDB-ID:26880
    last seen2016-02-03
    modified2005-12-19
    published2005-12-19
    reporterr0t3d3Vil
    sourcehttps://www.exploit-db.com/download/26880/
    titleFLIP 0.9.0.1029 - text.php name Parameter XSS
  • descriptionFLIP 0.9 .0.1029 forum.php frame Parameter XSS. CVE-2005-4365. Webapps exploit for php platform
    idEDB-ID:26881
    last seen2016-02-03
    modified2005-12-19
    published2005-12-19
    reporterr0t3d3Vil
    sourcehttps://www.exploit-db.com/download/26881/
    titleFLIP 0.9.0.1029 - forum.php frame Parameter XSS

References