4.3
CVSSv2

CVE-2005-0896

Published: 02/05/2005 Updated: 18/10/2016
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote malicious users to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

accomplishtechnology phpmydirectory 10.1.3

Exploits

source: wwwsecurityfocuscom/bid/12900/info phpMyDirectory is prone to a cross-site scripting vulnerability The problem presents itself when malicious HTML and script code is sent to the application through various parameters of the 'reviewphp' script This issue may allow for theft of cookie-based authentication credentials or other a ...