Vulnerabilities > CVE-2005-4596 - Unspecified vulnerability in Ades Design Adesguestbook 2.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN ades-design
exploit available
Summary
Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the totalRows_rsRead parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Ades Design AdesGuestbook 2.0 Read Script Cross-Site Scripting Vulnerability. CVE-2005-4596. Webapps exploit for php platform |
| id | EDB-ID:26992 |
| last seen | 2016-02-03 |
| modified | 2005-12-30 |
| published | 2005-12-30 |
| reporter | r0t3d3Vil |
| source | https://www.exploit-db.com/download/26992/ |
| title | Ades Design AdesGuestbook 2.0 Read Script Cross-Site Scripting Vulnerability |
References
- http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html
- http://pridels0.blogspot.com/2005/12/adesguestbook-xss-vuln.html
- http://secunia.com/advisories/18244
- http://secunia.com/advisories/18244
- http://www.osvdb.org/22111
- http://www.osvdb.org/22111
- http://www.securityfocus.com/bid/16090
- http://www.securityfocus.com/bid/16090
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23909
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23909