CVE-2005-2338

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) modules that use "XOOPS Code" and (2) newbb in the forum module.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://jvn.jp/jp/JVN%2377105349/index.html
http://marc.info/?l=bugtraq&m=113027315412024&w=2
http://secunia.com/advisories/17300Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/346302US Government Resource
http://www.kb.cert.org/vuls/id/683958US Government Resource
http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/85_e.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/15195
http://jvn.jp/jp/JVN%2377105349/index.html
http://marc.info/?l=bugtraq&m=113027315412024&w=2
http://secunia.com/advisories/17300Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/346302US Government Resource
http://www.kb.cert.org/vuls/id/683958US Government Resource
http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/85_e.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/15195

Timeline

Published: Oct 27, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-23394.3Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows r CVE-2005-23407.5Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Ima CVE-2005-23417.5Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a denial of service (h CVE-2005-23427.8Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Serve CVE-2005-23432.6Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of s CVE-2005-23445.0The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows at CVE-2005-23467.5Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a lon CVE-2005-23497.5Zoo 2.10 has Directory traversal CVE-2005-23506.1Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web us CVE-2005-23515.5Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.CVE-2005-23528.1I race condition in Temp files was found in gs-gpl before 8.56 addons scripts.CVE-2005-23532.1run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on tem