CVE-2005-3814

Published: Nov 26, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php.

Affected (1)

Products: Orbitscripts: Smartppc Pro

Orbitscripts

1 product

Smartppc Pro

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Orbitscripts Smartppc Pro	All versions

References (18)

http://nightmaresecurity.net/index.php?showtopic=1015

Source: cve@mitre.org

URL Repurposed

http://secunia.com/advisories/17736

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015259

Source: cve@mitre.org

http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5359

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/21090

Source: cve@mitre.org

http://www.osvdb.org/21091

Source: cve@mitre.org

http://www.osvdb.org/21092

Source: cve@mitre.org

http://www.securityfocus.com/bid/15567

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2581

Source: cve@mitre.org

http://nightmaresecurity.net/index.php?showtopic=1015