CVE-2005-3037

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secubox.teria.org/index.php?menu=24&action=detail&aid=82Exploit, Vendor Advisory
http://secunia.com/advisories/16798Vendor Advisory
http://securitytracker.com/id?1014901Exploit, Vendor Advisory
http://www.securityfocus.com/bid/14818
http://secubox.teria.org/index.php?menu=24&action=detail&aid=82Exploit, Vendor Advisory
http://secunia.com/advisories/16798Vendor Advisory
http://securitytracker.com/id?1014901Exploit, Vendor Advisory
http://www.securityfocus.com/bid/14818

Timeline

Published: Sep 22, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-30385.0Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives,CVE-2005-30397.5SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage par CVE-2005-30405.0Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remo CVE-2005-30415.0Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."CVE-2005-30427.5miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass aut CVE-2005-30437.5SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dr CVE-2005-30442.1Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) CVE-2005-30457.5SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via CVE-2005-30466.8SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privilege CVE-2005-30474.3Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the CVE-2005-30486.4Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP fi CVE-2005-30495.0PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote