CVE-2005-3406

Published: Nov 1, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected (23)

Products: Butterfat: Phpesp

Butterfat

1 product

Phpesp

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Butterfat Phpesp	Version 1.3_final
Butterfat Phpesp	Version 1.4_beta1
Butterfat Phpesp	Version 1.4_beta2
Butterfat Phpesp	Version 1.4_beta3
Butterfat Phpesp	Version 1.4_final
Butterfat Phpesp	Version 1.5_final
Butterfat Phpesp	Version 1.5_rc1
Butterfat Phpesp	Version 1.5_rc2
Butterfat Phpesp	Version 1.5_rc3
Butterfat Phpesp	Version 1.6.1_final
Butterfat Phpesp	Version 1.6_final
Butterfat Phpesp	Version 1.6_rc1
Butterfat Phpesp	Version 1.6_rc2
Butterfat Phpesp	Version 1.6_rc3
Butterfat Phpesp	Version 1.7.1
Butterfat Phpesp	Version 1.7.2
Butterfat Phpesp	Version 1.7.5
Butterfat Phpesp	Version 1.7.5_dev1
Butterfat Phpesp	Version 1.7.5_dev2
Butterfat Phpesp	Version 1.7.5_dev3
Butterfat Phpesp	Version 1.7
Butterfat Phpesp	Version 1.7_dev
Butterfat Phpesp	Version 1.7_rc1