CVE-2005-2327: XSS
First published: Wed Jul 20 2005(Updated: )
Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| e107 CMS | =0.551_beta | |
| e107 CMS | =0.616 | |
| e107 CMS | =5.05 | |
| e107 CMS | =0.549_beta | |
| e107 CMS | =0.615a | |
| e107 CMS | =5.21 | |
| e107 CMS | =0.555_beta | |
| e107 CMS | =0.610 | |
| e107 CMS | =0.607 | |
| e107 CMS | =0.609 | |
| e107 CMS | =5.4_beta6 | |
| e107 CMS | =0.606 | |
| e107 CMS | =0.602 | |
| e107 CMS | =0.554_beta | |
| e107 CMS | =0.553_beta | |
| e107 CMS | =0.600 | |
| e107 CMS | =0.552_beta | |
| e107 CMS | =0.613 | |
| e107 CMS | =0.604 | |
| e107 CMS | =5.4_beta3 | |
| e107 CMS | =0.603 | |
| e107 CMS | =5.4_beta1 | |
| e107 CMS | =0.614 | |
| e107 CMS | =0.547_beta | |
| e107 CMS | =0.601 | |
| e107 CMS | =5.3_beta2 | |
| e107 CMS | =0.608 | |
| e107 CMS | =0.548_beta | |
| e107 CMS | =0.611 | |
| e107 CMS | =5.4_beta4 | |
| e107 CMS | =0.605 | |
| e107 CMS | =5.3_beta | |
| e107 CMS | =5.4_beta5 | |
| e107 CMS | =0.617 | |
| e107 CMS | =0.612 | |
| e107 CMS | =5.1 | |
| e107 CMS | =5.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2005-2327?
CVE-2005-2327 has a medium severity rating due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2005-2327?
To fix CVE-2005-2327, update your e107 CMS installation to version 0.618 or newer where the vulnerability is addressed.
What versions of e107 CMS are affected by CVE-2005-2327?
CVE-2005-2327 affects e107 versions 0.617 and earlier, including various beta versions.
What kind of attacks can CVE-2005-2327 allow?
CVE-2005-2327 allows remote attackers to inject arbitrary web scripts or HTML into webpages, leading to XSS attacks.
Is CVE-2005-2327 easy to exploit?
Yes, CVE-2005-2327 can be easily exploited by an attacker familiar with XSS vulnerabilities, especially through nested [url] BBCode tags.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/e107
- canonical/e107 cms
- version/e107 cms/0.551_beta
- version/e107 cms/0.616
- version/e107 cms/5.05
- version/e107 cms/0.549_beta
- version/e107 cms/0.615a
- version/e107 cms/5.21
- version/e107 cms/0.555_beta
- version/e107 cms/0.610
- version/e107 cms/0.607
- version/e107 cms/0.609
- version/e107 cms/5.4_beta6
- version/e107 cms/0.606
- version/e107 cms/0.602
- version/e107 cms/0.554_beta
- version/e107 cms/0.553_beta
- version/e107 cms/0.600
- version/e107 cms/0.552_beta
- version/e107 cms/0.613
- version/e107 cms/0.604
- version/e107 cms/5.4_beta3
- version/e107 cms/0.603
- version/e107 cms/5.4_beta1
- version/e107 cms/0.614
- version/e107 cms/0.547_beta
- version/e107 cms/0.601
- version/e107 cms/5.3_beta2
- version/e107 cms/0.608
- version/e107 cms/0.548_beta
- version/e107 cms/0.611
- version/e107 cms/5.4_beta4
- version/e107 cms/0.605
- version/e107 cms/5.3_beta
- version/e107 cms/5.4_beta5
- version/e107 cms/0.617
- version/e107 cms/0.612
- version/e107 cms/5.1
- version/e107 cms/5.04