CVE-2005-1233

Published: Apr 20, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the (1) dir or (2) file parameters.

Affected (1)

Products: Php Labs: Profile

Php Labs

1 product

Profile

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Labs Profile	All versions

References (16)

http://secunia.com/advisories/15027

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1013756

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/15697

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/13276

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/13282

Source: cve@mitre.org

ExploitVendor Advisory

http://www.snkenjoi.com/secadv/secadv7.txt

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2005/0370

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20169

Source: cve@mitre.org

http://secunia.com/advisories/15027