CVE-2005-2488

medium

Description

Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21689

http://www.securityfocus.com/bid/14464

http://secunia.com/advisories/16317

Details

Source: Mitre, NVD

Published: 2005-08-07

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N