Unscored severity · published Dec 17, 2005
CVE-2005-4306
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid,…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SB
Sitenet Bbs · Focalmedia.net
through 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4306
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4306
pridels0.blogspot.com
http://pridels0.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html
Vendor Advisory
http://secunia.com/advisories/18090
www.securityfocus.com
http://www.securityfocus.com/bid/15883
www.vupen.com
http://www.vupen.com/english/advisories/2005/2939