QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-4485

Back to search

CVE-2005-4485

Published: Dec 22, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp.

VendorProductVersions

n/a

n/a

affected
n/a

References

21964
vdb-entry
x_refsource_OSVDB
ADV-2005-3040
vdb-entry
x_refsource_VUPEN
21965
vdb-entry
x_refsource_OSVDB
18199
third-party-advisory
x_refsource_SECUNIA
21966
vdb-entry
x_refsource_OSVDB
21963
vdb-entry
x_refsource_OSVDB
21962
vdb-entry
x_refsource_OSVDB
21967
vdb-entry
x_refsource_OSVDB
16011
vdb-entry
x_refsource_BID
21968
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now