Unscored severity · published Dec 8, 2005
CVE-2005-4078
Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID,…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Ideal Bb.net · Ideal Science
through 1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4078
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4078
pridels0.blogspot.com
http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html
Vendor Advisory
http://secunia.com/advisories/17906
www.osvdb.org
http://www.osvdb.org/21511
www.osvdb.org
http://www.osvdb.org/21512
www.osvdb.org
http://www.osvdb.org/21513
www.osvdb.org
http://www.osvdb.org/21514