Published: 02/05/2005 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 450

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote malicious users to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
active web softwares active auction house 7.1

source: wwwsecurityfocuscom/bid/13036/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspect ...

source: wwwsecurityfocuscom/bid/13038/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspect ...

source: wwwsecurityfocuscom/bid/13039/info Active Auction House is reportedly affected by a cross-site scripting vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user This ...

source: wwwsecurityfocuscom/bid/13036/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspe ...

NVD-CWE-Other http://digitalparadox.org/advisories/aass.txt http://www.securityfocus.com/bid/13036 http://www.securityfocus.com/bid/13038 http://www.securityfocus.com/bid/13039 http://www.securitytracker.com/alerts/2005/Apr/1013649.html http://secunia.com/advisories/14839 http://www.osvdb.org/15284 http://www.osvdb.org/15285 http://www.osvdb.org/15286 http://www.osvdb.org/15287 http://marc.info/?l=bugtraq&m=111280834000432&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19975 https://nvd.nist.gov https://www.exploit-db.com/exploits/25348/

CVE-2005-1030

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect