CVE-2005-3260

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=112907535528616&w=2
http://rgod.altervista.org/versatile100RC2.htmlExploit, Vendor Advisory
http://secunia.com/advisories/17174/Vendor Advisory
http://www.osvdb.org/19969
http://www.osvdb.org/19970
http://www.osvdb.org/19971
http://www.securityfocus.com/bid/15073Exploit
http://marc.info/?l=bugtraq&m=112907535528616&w=2
http://rgod.altervista.org/versatile100RC2.htmlExploit, Vendor Advisory
http://secunia.com/advisories/17174/Vendor Advisory
http://www.osvdb.org/19969
http://www.osvdb.org/19970
http://www.osvdb.org/19971
http://www.securityfocus.com/bid/15073Exploit

Timeline

Published: Oct 20, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-32615.0getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obta CVE-2005-32627.5Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifier CVE-2005-32637.5Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE CVE-2005-32644.3Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or CVE-2005-32659.3Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) sk CVE-2005-326710.0Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier al CVE-2005-32682.1yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allow CVE-2005-32697.5Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, an CVE-2005-32707.2Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifyin CVE-2005-32712.1Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could all CVE-2005-32725.0Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filt CVE-2005-32735.0The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.