Unscored severity · published Mar 23, 2005
CVE-2005-0881
Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Articlelive · Interspire
2005 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0881
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0881
marc.info
http://marc.info/?l=bugtraq&m=112483966331737&w=2
Patch
http://secunia.com/advisories/14708
Vendor Advisory
http://www.securityfocus.com/archive/1/394069
Vendor Advisory
http://www.securityfocus.com/bid/12879
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/19817
More from Articlelive
–
CVE-2005-1482
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie
–
CVE-2005-1483
Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3)…