CVE-2005-3520 : Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web sc

Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.

Published 2005-11-06 11:03:00

Updated 2017-07-11 01:33:13

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Exploit prediction scoring system (EPSS) score for CVE-2005-3520

EPSS FAQ

1.31%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-3520

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

Products affected by CVE-2005-3520

Mysource » Mysource » Version: 2.14.0
cpe:2.3:a:mysource:mysource:2.14.0:*:*:*:*:*:*:*
Matching versions
Mysource » Mysource » Version: 2.14.0rc2
cpe:2.3:a:mysource:mysource:2.14.0rc2:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2005-3520

Exploit prediction scoring system (EPSS) score for CVE-2005-3520

CVSS scores for CVE-2005-3520

References for CVE-2005-3520

Products affected by CVE-2005-3520