CVE-2005-4485
Last modified
CVE-2005-4485 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp.. EPSS estimates a 2.73% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iatek | Projectapp | <= 3.3 |
References
- http://secunia.com/advisories/18199Vendor Advisory
- http://www.osvdb.org/21962Exploit
- http://www.osvdb.org/21963Exploit
- http://www.osvdb.org/21964Exploit
- http://www.osvdb.org/21965Exploit
- http://www.osvdb.org/21966Exploit
- http://www.osvdb.org/21967Exploit
- http://www.osvdb.org/21968Exploit
- http://www.vupen.com/english/advisories/2005/3040Vendor Advisory
- http://secunia.com/advisories/18199Vendor Advisory
- http://www.osvdb.org/21962Exploit
- http://www.osvdb.org/21963Exploit
- http://www.osvdb.org/21964Exploit
- http://www.osvdb.org/21965Exploit
- http://www.osvdb.org/21966Exploit
- http://www.osvdb.org/21967Exploit
- http://www.osvdb.org/21968Exploit
- http://www.vupen.com/english/advisories/2005/3040Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-4485?
How severe is CVE-2005-4485?
How do I fix CVE-2005-4485?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-4479SQL injection vulnerability in article.php in phpSlash 0.8.1…
- CVE-2005-4480Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 …
- CVE-2005-4481Cross-site scripting (XSS) vulnerability in Polopoly 9 and e…
- CVE-2005-4482Cross-site scripting (XSS) vulnerability in login.asp in Por…
- CVE-2005-4483Cross-site scripting (XSS) vulnerability in login.asp in Sit…
- CVE-2005-4484Multiple cross-site scripting (XSS) vulnerabilities in Intra…
- CVE-2005-4486SQL injection vulnerability in Quantum Art QP7.Enterprise (f…
- CVE-2005-4487Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS …
- CVE-2005-4488Multiple cross-site scripting (XSS) vulnerabilities in index…
- CVE-2005-4489Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 an…
- CVE-2005-4490Multiple cross-site scripting (XSS) vulnerabilities in SCOOP…
- CVE-2005-4491Multiple cross-site scripting (XSS) vulnerabilities in Sitek…
Are you affected by CVE-2005-4485?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST