Unscored severity · published May 11, 2005
CVE-2005-1483
Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3)…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Articlelive · Interspire
2005 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1483
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1483
marc.info
http://marc.info/?l=bugtraq&m=111530871724865&w=2
secunia.com
http://secunia.com/advisories/15250
Exploit
http://securitytracker.com/id?1013895
www.osvdb.org
http://www.osvdb.org/16183
Exploit
http://www.securityfocus.com/bid/13493
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20430
More from Articlelive
–
CVE-2005-1482
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie
–
CVE-2005-0881
Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld…