CVE-2005-1634: XSS
Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahlbeitraege parameter to jgsportal.php, (2) year parameter to jgsportalstatistik.php, (3) year parameter to jgsportalbeitraggraf.php, (4) tag parameter to jgsportalviewsgraf.php, (5) year parameter to jgsportalthemengraf.php, (6) year parameter to jgsportalmitgraf.php, (7) id parameter to jgsportalsponsor.php, or (8) the Accept-Language header to jgsportallog.php. NOTE: this issue may stem from the same core problem as CVE-2005-1633.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1634?
The severity of CVE-2005-1634 is considered medium due to the potential for cross-site scripting attacks.
How do I fix CVE-2005-1634?
To fix CVE-2005-1634, you should upgrade to a version of JGS-Portal later than 3.0.2.
Which software is affected by CVE-2005-1634?
CVE-2005-1634 affects JGS-XA JGS-Portal versions 3.0.2 and earlier.
What types of attacks can CVE-2005-1634 lead to?
CVE-2005-1634 can lead to cross-site scripting (XSS) attacks allowing the injection of malicious web scripts or HTML.
Can CVE-2005-1634 be exploited remotely?
Yes, CVE-2005-1634 allows remote attackers to exploit the vulnerability through crafted parameters.