QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-4530

Back to search

CVE-2005-4530

Published: Dec 28, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm, (2) card.htm, (3) bank.htm, (4) subscriptions.htm, (5) send.htm, (6) request.htm, (7) forgot.htm, (8) escrow.htm, (9) donations.htm, and (10) products.htm.

VendorProductVersions

n/a

n/a

affected
n/a

References

21887
vdb-entry
x_refsource_OSVDB
ADV-2005-3074
vdb-entry
x_refsource_VUPEN
18153
third-party-advisory
x_refsource_SECUNIA
21883
vdb-entry
x_refsource_OSVDB
21891
vdb-entry
x_refsource_OSVDB
21885
vdb-entry
x_refsource_OSVDB
21892
vdb-entry
x_refsource_OSVDB
21888
vdb-entry
x_refsource_OSVDB
16055
vdb-entry
x_refsource_BID
21889
vdb-entry
x_refsource_OSVDB
21884
vdb-entry
x_refsource_OSVDB
21886
vdb-entry
x_refsource_OSVDB
21890
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now