CVE-2005-2338: XSS
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) modules that use "XOOPS Code" and (2) newbb in the forum module.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2338?
CVE-2005-2338 is considered a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2005-2338?
To fix CVE-2005-2338, upgrade to XOOPS versions above 2.0.12 JP, 2.0.13.1, and 2.2.3 RC1 or apply necessary security patches.
What types of attacks are possible with CVE-2005-2338?
CVE-2005-2338 allows remote attackers to execute arbitrary web scripts or HTML through cross-site scripting vulnerabilities.
Which versions of XOOPS are affected by CVE-2005-2338?
CVE-2005-2338 affects XOOPS versions 2.0.12 JP and earlier, 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1.
Can CVE-2005-2338 be exploited without user interaction?
Yes, CVE-2005-2338 can be exploited remotely, potentially without user interaction, through crafted URLs or site content.