CVE-2005-2588

Published: Aug 17, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter to dispbbs.asp, (2) name parameter to dispuser.asp, or the (3) title, (4) view, or (5) act parameter to boardhelp.asp.

Affected (2)

Products: Dvbbs: Dvbbs

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dvbbs Dvbbs	Version 7.1
Dvbbs Dvbbs	Version 7.1_sp2

References (10)

http://lostmon.blogspot.com/2005/08/dvbbs-multiple-variable-cross-site.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/16131

Source: cve@mitre.org

ExploitVendor Advisory

http://securitytracker.com/id?1014632

Source: cve@mitre.org

Exploit

http://www.osvdb.org/18512

Source: cve@mitre.org

http://www.securityfocus.com/bid/14498

Source: cve@mitre.org

http://lostmon.blogspot.com/2005/08/dvbbs-multiple-variable-cross-site.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/advisories/16131

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://securitytracker.com/id?1014632

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/18512

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14498

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.