CVE-2005-3770

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the subject in a post, or the user parameter to (2) profile.php and (3) mail.php.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://irannetjob.com/content/view/168/28/Exploit, Vendor Advisory, URL Repurposed
http://secunia.com/advisories/17706Vendor Advisory
http://www.osvdb.org/21057
http://www.osvdb.org/21059
http://www.securityfocus.com/archive/1/417434/30/0/threaded
http://www.securityfocus.com/bid/15524Exploit
http://www.securityfocus.com/bid/15532
http://www.vupen.com/english/advisories/2005/2533Vendor Advisory
http://irannetjob.com/content/view/168/28/Exploit, Vendor Advisory, URL Repurposed
http://secunia.com/advisories/17706Vendor Advisory
http://www.osvdb.org/21057
http://www.osvdb.org/21059
http://www.securityfocus.com/archive/1/417434/30/0/threaded
http://www.securityfocus.com/bid/15524Exploit
http://www.securityfocus.com/bid/15532
http://www.vupen.com/english/advisories/2005/2533Vendor Advisory

Timeline

Published: Nov 23, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-37714.3Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML vi CVE-2005-37727.5Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid v CVE-2005-377310.0Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component fil CVE-2005-37745.0Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the CVE-2005-37757.5PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the poll CVE-2005-37764.3Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web CVE-2005-37775.0MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form CVE-2005-37785.0Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors CVE-2005-37797.2Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors.CVE-2005-37807.5Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain CVE-2005-37815.0Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.nam CVE-2005-37822.1Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons