CVE-2005-3814

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php.

References

http://www.vupen.com/english/advisories/2005/2581

http://www.securityfocus.com/bid/15567

http://www.osvdb.org/21092

http://www.osvdb.org/21091

http://www.osvdb.org/21090

http://securitytracker.com/id?1015259

http://secunia.com/advisories/17736

http://nightmaresecurity.net/index.php?showtopic=1015

Details

Source: Mitre, NVD

Published: 2005-11-26

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N