CVE-2005-1674

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.gulftech.org/?node=research&article_id=00076-05172005Broken Link
http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00076-05172005Broken Link
http://www.securityfocus.com/archive/1/398457/2005-05-15/2005-05-21/0Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Timeline

Published: May 19, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-16754.6Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client install CVE-2005-16766.8Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a b CVE-2005-16777.5Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 al CVE-2005-16782.6Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display f CVE-2005-16795.1Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error m CVE-2005-16807.5D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication CVE-2005-16817.5PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbi CVE-2005-16822.1JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructo CVE-2005-16832.6Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attacke CVE-2005-16844.3Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTM CVE-2005-16857.5episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.CVE-2005-16862.6Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format