CVE-2005-3790: XSS
Published Nov 24, 2005
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in actnewsletter.php in phpwcms 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) i and (2) text parameters.
Affected Software
2 affected components
Phpwcms Phpwcms=1.2.5_dev
Phpwcms Phpwcms=1.2.5_dev
Event History
Nov 24, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3790?
CVE-2005-3790 is considered a high severity vulnerability due to its potential for remote code execution via cross-site scripting attacks.
2
How do I fix CVE-2005-3790?
To fix CVE-2005-3790, update phpwcms to a version that is not affected by the XSS vulnerabilities.
3
What are the affected versions for CVE-2005-3790?
CVE-2005-3790 specifically affects phpwcms version 1.2.5_dev.
4
What kind of attacks can be executed using CVE-2005-3790?
CVE-2005-3790 allows attackers to perform cross-site scripting attacks, which can lead to data theft or session hijacking.
5
Is there a patch available for CVE-2005-3790?
Yes, a solution involves upgrading to a patched version of phpwcms that addresses the identified cross-site scripting vulnerabilities.