CVE-2005-0629

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110970474726113&w=2
http://marc.info/?l=bugtraq&m=110970911514167&w=2
http://secunia.com/advisories/14434Vendor Advisory
http://securitytracker.com/id?1013337Vendor Advisory
http://www.securityfocus.com/bid/12693Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19546
http://marc.info/?l=bugtraq&m=110970474726113&w=2
http://marc.info/?l=bugtraq&m=110970911514167&w=2
http://secunia.com/advisories/14434Vendor Advisory
http://securitytracker.com/id?1013337Vendor Advisory
http://www.securityfocus.com/bid/12693Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19546

Timeline

Published: Mar 1, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-06302.1sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.CVE-2005-06312.1delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.CVE-2005-06325.0PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP co CVE-2005-06337.5Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.CVE-2005-06347.5Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.CVE-2005-063510.0Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.CVE-2005-063610.0Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar CVE-2005-06375.0The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers t CVE-2005-06387.5xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for comp CVE-2005-06397.5Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain CVE-2005-06404.6Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, whi CVE-2005-06414.3Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote att