CVE-2005-4597

Published: Dec 31, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook.

Affected (1)

Products: Epistream: Ipei Guestbook

Epistream

1 product

Ipei Guestbook

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Epistream Ipei Guestbook	Version 1.7

References (10)

http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/18241

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/22118

Source: cve@mitre.org

http://www.securityfocus.com/bid/16092

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23914

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html