CVE-2005-2453

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the query string.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/16301Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-31/advisory/Patch, Vendor Advisory
http://securitytracker.com/id?1014624
http://www.osvdb.org/18525
http://www.securityfocus.com/bid/14473
https://exchange.xforce.ibmcloud.com/vulnerabilities/21696
http://secunia.com/advisories/16301Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-31/advisory/Patch, Vendor Advisory
http://securitytracker.com/id?1014624
http://www.osvdb.org/18525
http://www.securityfocus.com/bid/14473
https://exchange.xforce.ibmcloud.com/vulnerabilities/21696

Timeline

Published: Aug 4, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-24544.6IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and a CVE-2005-24555.0Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest CVE-2005-24565.5Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of servic CVE-2005-24575.0The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a d CVE-2005-24585.0inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a CVE-2005-24595.0The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote a CVE-2005-24605.8Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML CVE-2005-24616.4Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL co CVE-2005-24622.1Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote CVE-2005-24636.4Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include sc CVE-2005-24647.5login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target CVE-2005-24655.8Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the