CVE-2005-2650

Published: Aug 23, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters.

Affected (1)

Products: Emefa: Emefa Guestbook

Emefa

1 product

Emefa Guestbook

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Emefa Emefa Guestbook	Version 1.2

References (10)

http://packetstormsecurity.org/0508-advisories/emefaGuest.txt

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/16489

Source: cve@mitre.org

PatchVendor Advisory

http://systemsecure.org/ssforum/viewtopic.php?t=91

Source: cve@mitre.org

Vendor Advisory

http://www.emefa.myserver.org/comp/guestview.php

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/14599

Source: cve@mitre.org

http://packetstormsecurity.org/0508-advisories/emefaGuest.txt