CVE-2005-3073

Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.

• http://secunia.com/advisories/16923Patch, Vendor Advisory
• http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.htmlPatch, Vendor Advisory
• http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.htmlPatch
• http://www.osvdb.org/19653
• http://www.securityfocus.com/bid/14931
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22387
• http://secunia.com/advisories/16923Patch, Vendor Advisory
• http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.htmlPatch, Vendor Advisory
• http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.htmlPatch
• http://www.osvdb.org/19653
• http://www.securityfocus.com/bid/14931
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22387

Published

Sep 27, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3067Cross-site scripting (XSS) vulnerability in perldiver.cgi in…
• CVE-2005-3068Unspecified vulnerability in Eric Integrated Development Env…
• CVE-2005-3069xferfaxstats in HylaFax 4.2.1 and earlier allows local users…
• CVE-2005-3070HylaFax 4.2.1 and earlier does not create or verify ownershi…
• CVE-2005-3071Unspecified vulnerability in Unix File System (UFS) on Solar…
• CVE-2005-3072SQL injection vulnerability in pages/forum/submit.html in In…
• CVE-2005-3074SQL injection vulnerability in rsyslogd in RSyslog before 1.…
• CVE-2005-3075SQL injection vulnerability in Zengaia before 0.2 allows rem…
• CVE-2005-3076Simplog 0.9.1 might allow remote attackers to execute arbitr…
• CVE-2005-3077Microsoft Internet Explorer 5.2.3 for Mac OS allows remote a…
• CVE-2005-3078Cross-site scripting (XSS) vulnerability in PunBB before 1.2…
• CVE-2005-3079PunBB before 1.2.8 allows remote attackers to perform "code …