Unscored severity · published Dec 31, 2005
CVE-2005-4732
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TU
Tuxbank · Tux Racer
0.8; 0.72; 0.73; 0.74; 0.75; 0.76; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4732
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4732
osvdb.org
http://osvdb.org/ref/20/20696-tux.txt
tuxbank.sourceforge.net
http://tuxbank.sourceforge.net/CHANGES.txt
Exploit
http://www.osvdb.org/20696
More from Tuxbank
–
CVE-2005-4768
SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a…