CVE-2005-4307

Published: Dec 17, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.

Affected (6)

Products: Jonathan Bravata: Scarecrow

Jonathan Bravata

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Jonathan Bravata Scarecrow	version ≤ 2.13
Jonathan Bravata Scarecrow	Version 2.00_beta
Jonathan Bravata Scarecrow	Version 2.01_beta
Jonathan Bravata Scarecrow	Version 2.10
Jonathan Bravata Scarecrow	Version 2.11
Jonathan Bravata Scarecrow	Version 2.12

References (14)

http://pridels0.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/18084

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21777

Source: cve@mitre.org

http://www.osvdb.org/21778

Source: cve@mitre.org

http://www.osvdb.org/21779

Source: cve@mitre.org

http://www.securityfocus.com/bid/15915

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2937

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18084

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/21777

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21778

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21779

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15915

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2005/2937

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.