Vulnerability in 1two News
CVE-2005-1582
Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.
EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.
Affected products
- 1two 1two_news — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)