4.3
CVSSv2

CVE-2005-4596

Published: 31/12/2005 Updated: 20/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote malicious users to inject arbitrary web script or HTML via the totalRows_rsRead parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

ades design adesguestbook 2.0

Exploits

source: wwwsecurityfocuscom/bid/16090/info Ades Design AdesGuestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This ...