Vulnerability in Cpg-Nuke Cpg Dragonfly Cms

CVE-2005-0914

Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter.

EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.

Affected products

Cpg-nuke Cpg_dragonfly_cms — versions 9.0.2_.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)