Unscored severity · published Dec 21, 2005
CVE-2005-4460
Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Beehive Forum · Beehive Forum
0.1; 0.1.1; 0.2; 0.3; 0.3.1; 0.4; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4460
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4460
cvs.sourceforge.net
http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log
secunia.com
http://secunia.com/advisories/18154
www.securityfocus.com
http://www.securityfocus.com/archive/1/419988/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/16002
www.vupen.com
http://www.vupen.com/english/advisories/2005/3043
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23879
More from Beehive Forum
9.8
CVE-2022-50910
Beehive Forum - Account Takeover
–
CVE-2015-2198
Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVE-2012-0900
Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1)…
–
CVE-2007-6014
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t_dedupe parameter
–
CVE-2007-6241
Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014