CVE-2005-0251

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110868948719773&w=2Exploit, Mailing List, Third Party Advisory
http://marc.info/?l=full-disclosure&m=110864983905770&w=2Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/12583Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://marc.info/?l=bugtraq&m=110868948719773&w=2Exploit, Mailing List, Third Party Advisory
http://marc.info/?l=full-disclosure&m=110864983905770&w=2Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/12583Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-02527.5SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via th CVE-2005-02534.0Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary CVE-2005-02543.7BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remot CVE-2005-02555.0String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do CVE-2005-02565.0The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by r CVE-2005-02585.0Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with g CVE-2005-02596.4phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by p CVE-2005-026010.0Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbi CVE-2005-02612.1lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to CVE-2005-02627.2Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.CVE-2005-02637.2Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.CVE-2005-02644.3Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script o