CVE-2005-1605 : Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary

Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studio or (2) E-Guest_sign.pl in Integrated Site Studio with H-Sphere.

Published 2005-05-16 04:00:00

Updated 2017-07-11 01:32:43

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Exploit prediction scoring system (EPSS) score for CVE-2005-1605

EPSS FAQ

0.92%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 81 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-1605

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2005-1605

Positive Software » Sitestudio » Version: 1.6 Final
cpe:2.3:a:positive_software:sitestudio:1.6_final:*:*:*:*:*:*:*
Matching versions
Positive Software » Sitestudio » Version: 1.6 Patch 1
cpe:2.3:a:positive_software:sitestudio:1.6_patch_1:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2005-1605

Exploit prediction scoring system (EPSS) score for CVE-2005-1605

CVSS scores for CVE-2005-1605

References for CVE-2005-1605

Products affected by CVE-2005-1605