Published: 03/08/2005 Updated: 19/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote malicious users to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vbzoom vbzoom

source: wwwsecurityfocuscom/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in t ...

source: wwwsecurityfocuscom/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the ...

NVD-CWE-Other http://www.securityfocus.com/bid/14423 http://www.osvdb.org/18662 http://www.osvdb.org/18663 http://securitytracker.com/id?1014614 http://secunia.com/advisories/16220 http://marc.info/?l=bugtraq&m=112300586019568&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/21680 http://www.securityfocus.com/archive/1/426874/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/26050/

CVE-2005-2441

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect