CVE-2005-3955

Published: Dec 1, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php.

Affected (3)

Products: Blogbuddies: Blogbuddies · Jaws: Jaws · Magpierss: Magpierss

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Blogbuddies Blogbuddies	Version 0.3
Jaws Jaws	Version 0.6.2
Magpierss Magpierss	Version 7.1

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (30)

http://retrogod.altervista.org/JAWS_062_sql.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/May/35

Source: cve@mitre.org

http://secunia.com/advisories/17741

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20842

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015264

Source: cve@mitre.org

http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847

Source: cve@mitre.org

Patch

http://www.jaws-project.com/index.php?blog/show/29

Source: cve@mitre.org

http://www.osvdb.org/21112

Source: cve@mitre.org

http://www.osvdb.org/21113

Source: cve@mitre.org

http://www.osvdb.org/21643

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438434/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15555

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/18665

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2546

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/27337

Source: cve@mitre.org

http://retrogod.altervista.org/JAWS_062_sql.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2015/May/35

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17741

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20842

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015264

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.jaws-project.com/index.php?blog/show/29

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21112

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21113

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21643

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/438434/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15555

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/18665

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2546

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/27337

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.