CVE-2005-1030 in Active Auction House

Zusammenfassung (Englisch)

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.

Reservieren

10.04.2005

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
82411	Active Auction House watchthisitem.asp Cross Site Scripting	80	Proof-of-Concept	Nicht definiert	CVE-2005-1030
82410	Active Auction House sendpassword.asp Cross Site Scripting	80	Proof-of-Concept	Workaround	CVE-2005-1030
82385	Active Auction House account.asp Cross Site Scripting	80	Proof-of-Concept	Nicht definiert	CVE-2005-1030
24806	Active Web Softwares Active Auction House account.asp Cross Site Scripting	80	Proof-of-Concept	Workaround	CVE-2005-1030