CVE-2005-1075

EPSS 2.0%

Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/25371unverified exploitdbwww.exploit-db.com/exploits/25372unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/14906 https://exchange.xforce.ibmcloud.com/vulnerabilities/20038 http://www.digitalparadox.org/advisories/rga.txt http://www.osvdb.org/15430 http://www.osvdb.org/15431 http://www.securityfocus.com/archive/1/395527 http://www.securityfocus.com/bid/13080