Vulnerability in Active Web Softwares Activebuyandsell
CVE-2005-2063
Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to sendpassword.asp or (2) Keyword field in search.asp.
EPSS: 0.010 (58.0th percentile) — read the EPSS interpretation.
Affected products
- Active_web_softwares Activebuyandsell — versions 6.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)