CVE

Id
12811  
CVE No.
CVE-2005-1605  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studio or (2) E-Guest_sign.pl in Integrated Site Studio with H-Sphere.  
Phase
Assigned (20050516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
92308 12811 CVE-2005-1605 FULLDISC:20050509 SiteStudio  View
92309 12811 CVE-2005-1605 URL:http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0154.html  View
92310 12811 CVE-2005-1605 MISC:http://exploitlabs.com/files/advisories/EXPL-A-2005-008-sitestudio.txt  View
92311 12811 CVE-2005-1605 CONFIRM:http://www.psoft.net/SS/ss_16_security_update_guestbook.html  View
92312 12811 CVE-2005-1605 CONFIRM:http://www.psoft.net/misc/hsphere_winbox_security_update_guestbook.html  View
92313 12811 CVE-2005-1605 BID:13554  View
92314 12811 CVE-2005-1605 URL:http://www.securityfocus.com/bid/13554  View
92315 12811 CVE-2005-1605 OSVDB:16240  View
92316 12811 CVE-2005-1605 URL:http://www.osvdb.org/16240  View
92317 12811 CVE-2005-1605 SECUNIA:15286  View
92318 12811 CVE-2005-1605 URL:http://secunia.com/advisories/15286  View
92319 12811 CVE-2005-1605 XF:sitestudio-guestbook-xss(20496)  View

Related JVN