QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-3552

Back to search

CVE-2005-3552

Published: Nov 16, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook.

VendorProductVersions

n/a

n/a

affected
n/a

References

phpkit-profile-userinfo-xss(23003)
vdb-entry
x_refsource_XF
phpkit-imcenter-xss(23008)
vdb-entry
x_refsource_XF
1015167
vdb-entry
x_refsource_SECTRACK
20553
vdb-entry
x_refsource_OSVDB
15354
vdb-entry
x_refsource_BID
phpkit-referer-xss(23006)
vdb-entry
x_refsource_XF
20558
vdb-entry
x_refsource_OSVDB
phpkit-html-tags-xss(23007)
vdb-entry
x_refsource_XF
phpkit-guestbook-xss(23009)
vdb-entry
x_refsource_XF
20555
vdb-entry
x_refsource_OSVDB
ADV-2005-2344
vdb-entry
x_refsource_VUPEN
20554
vdb-entry
x_refsource_OSVDB
20559
vdb-entry
x_refsource_OSVDB
17479
third-party-advisory
x_refsource_SECUNIA
20556
vdb-entry
x_refsource_OSVDB
phpkit-admin-xss(23004)
vdb-entry
x_refsource_XF
20557
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now