CVE-2005-1610

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via a base64 encoded Codigo parameter.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lostmon.blogspot.com/2005/05/nukeet-codigo-variable-cross-site.htmlExploit, Patch, Vendor Advisory
http://secunia.com/advisories/15332Vendor Advisory
http://securitytracker.com/id?1013936Patch, Vendor Advisory
http://www.osvdb.org/16214Patch, Vendor Advisory
http://www.securityfocus.com/bid/13570Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20540
http://lostmon.blogspot.com/2005/05/nukeet-codigo-variable-cross-site.htmlExploit, Patch, Vendor Advisory
http://secunia.com/advisories/15332Vendor Advisory
http://securitytracker.com/id?1013936Patch, Vendor Advisory
http://www.osvdb.org/16214Patch, Vendor Advisory
http://www.securityfocus.com/bid/13570Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20540

Timeline

Published: May 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-16116.8Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web script or HTML via a UR CVE-2005-16127.5SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via CVE-2005-16136.8Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web CVE-2005-16146.8Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject ar CVE-2005-16157.5viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, w CVE-2005-16167.5viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or CVE-2005-16172.1Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive infor CVE-2005-16185.0The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login CVE-2005-16194.3Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat CVE-2005-16204.3Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject arbitrary web script CVE-2005-16215.0Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read CVE-2005-16224.3Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script