CVE-2005-1118

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14954Patch, Vendor Advisory
http://securitytracker.com/id?1013724Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/366372US Government Resource
http://www.oliverkarow.de/research/rsaxss.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/13168Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20098
http://secunia.com/advisories/14954Patch, Vendor Advisory
http://securitytracker.com/id?1013724Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/366372US Government Resource
http://www.oliverkarow.de/research/rsaxss.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/13168Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20098

Timeline

Published: Apr 14, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-11192.1Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.CVE-2005-11204.3Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or CVE-2005-11215.0Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in t CVE-2005-11227.5Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possi CVE-2005-11235.0Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte CVE-2005-11244.6Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain privileges by loadin CVE-2005-11255.1Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and CVE-2005-11262.1The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, wh CVE-2005-11275.0Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.1 CVE-2005-11287.5Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs f CVE-2005-11292.1eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, whic CVE-2005-11304.3Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via th