CVE-2005-3066

Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.

• http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.htmlExploit, Patch, Vendor Advisory
• http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txtExploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1015146Exploit, Patch, Vendor Advisory
• http://www.scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443Exploit, Patch, Vendor Advisory
• http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443Exploit, Patch, Vendor Advisory
• http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447Patch
• http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.htmlExploit, Patch, Vendor Advisory
• http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txtExploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1015146Exploit, Patch, Vendor Advisory
• http://www.scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443Exploit, Patch, Vendor Advisory
• http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443Exploit, Patch, Vendor Advisory
• http://www.scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447Patch

Published

Sep 27, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3060Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows loca…
• CVE-2005-3061Multiple stack-based buffer overflows in PowerArchiver 8.10 …
• CVE-2005-3062PHP remote file inclusion vulnerability in index.php in Alst…
• CVE-2005-3063SQL injection vulnerability in MailGust 1.9 allows remote at…
• CVE-2005-3064MultiTheftAuto 0.5 patch 1 and earlier does not properly ver…
• CVE-2005-3065MultiTheftAuto 0.5 patch 1 and earlier allows remote attacke…
• CVE-2005-3067Cross-site scripting (XSS) vulnerability in perldiver.cgi in…
• CVE-2005-3068Unspecified vulnerability in Eric Integrated Development Env…
• CVE-2005-3069xferfaxstats in HylaFax 4.2.1 and earlier allows local users…
• CVE-2005-3070HylaFax 4.2.1 and earlier does not create or verify ownershi…
• CVE-2005-3071Unspecified vulnerability in Unix File System (UFS) on Solar…
• CVE-2005-3072SQL injection vulnerability in pages/forum/submit.html in In…