CVE-2005-0650
Last modified
CVE-2005-0650 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.. EPSS estimates a 1.91% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Projectbb | Projectbb | 0.4.5.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0650?
How severe is CVE-2005-0650?
How do I fix CVE-2005-0650?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-0644Buffer overflow in McAfee Scan Engine 4320 with DAT version …
- CVE-2005-0645Cross-site scripting (XSS) vulnerability in show.inc.php in …
- CVE-2005-0646SQL injection vulnerability in auth.php in paNews 2.0.4b all…
- CVE-2005-0647admin_setup.php in paNews 2.0.4b allows remote attackers to …
- CVE-2005-0648Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0…
- CVE-2005-0649Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to …
- CVE-2005-0651Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 …
- CVE-2005-0652Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and Open…
- CVE-2005-0653phpMyAdmin 2.6.1 does not properly grant permissions on tabl…
- CVE-2005-0654gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows …
- CVE-2005-0655auraCMS 1.5 allows remote attackers to obtain sensitive info…
- CVE-2005-0656Multiple cross-site scripting (XSS) vulnerabilities in auraC…
Are you affected by CVE-2005-0650?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST