CVE-2005-0216

Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=bugtraq&m=110537385427004&w=2
http://secunia.com/advisories/13782
http://www.securityfocus.com/bid/12199	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18814
http://marc.info/?l=bugtraq&m=110537385427004&w=2
http://secunia.com/advisories/13782
http://www.securityfocus.com/bid/12199	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18814

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:woltlab:burning_board_lite:1.0.0:::::::*
	cpe:2.3:a:woltlab:burning_board_lite:1.0.1e:::::::*

History

20 Nov 2024, 23:54

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=110537385427004&w=2 -~~	() http://marc.info/?l=bugtraq&m=110537385427004&w=2 -
References	~~() http://secunia.com/advisories/13782 -~~	() http://secunia.com/advisories/13782 -
References	~~() http://www.securityfocus.com/bid/12199 - Exploit~~	() http://www.securityfocus.com/bid/12199 - Exploit
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/18814 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/18814 -

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:54

NVD link : CVE-2005-0216

Mitre link : CVE-2005-0216

CVE.ORG link : CVE-2005-0216

JSON object : View

Products Affected

woltlab

burning_board_lite

CWE

NVD-CWE-Other

{"id": "CVE-2005-0216", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=110537385427004&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/13782", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/12199", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18814", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=110537385427004&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/13782", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/12199", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18814", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter."}], "lastModified": "2024-11-20T23:54:39.417", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:woltlab:burning_board_lite:1.0.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19FEBFAB-8F11-4592-BCC8-C54B6ADE783D"}, {"criteria": "cpe:2.3:a:woltlab:burning_board_lite:1.0.1e:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E35CFD5C-42EB-4D74-887A-30118A0A7D1C"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}