Unscored severity · published Nov 26, 2005
CVE-2005-3841
Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KP
Kplaylist · Kplaylist
1.6_build_400 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3841
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3841
pridels0.blogspot.com
http://pridels0.blogspot.com/2005/11/kplaylist-xss-vuln.html
Vendor Advisory
http://secunia.com/advisories/17689
Exploit
http://www.osvdb.org/21069
www.securityfocus.com
http://www.securityfocus.com/bid/15546
www.vupen.com
http://www.vupen.com/english/advisories/2005/2551
More from Kplaylist
–
CVE-2011-3750
kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as…