CVE

Id
14092  
CVE No.
CVE-2005-2886  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via (1) the print parameter to the print module, the sitename parameter to (2) bb_smilies or (3) bbcode_ref module, or (4) the hlpfile parameter to openwindow.php.  
Phase
Assigned (20050914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
104118 14092 CVE-2005-2886 BUGTRAQ:20050906 MAXdev MD-Pro 1.0.73 (possibly prior versions) remote code execution / cross site scripting / path disclosure  View
104119 14092 CVE-2005-2886 URL:http://marc.info/?l=bugtraq&m=112603835317458&w=2  View
104120 14092 CVE-2005-2886 MISC:http://rgod.altervista.org/maxdev1073.html  View
104121 14092 CVE-2005-2886 BID:14751  View
104122 14092 CVE-2005-2886 URL:http://www.securityfocus.com/bid/14751  View
104123 14092 CVE-2005-2886 SECUNIA:16731  View
104124 14092 CVE-2005-2886 URL:http://secunia.com/advisories/16731/  View
104125 14092 CVE-2005-2886 XF:mdpro-modules-openwindow-xss(22200)  View

Related JVN