CVE-2005-4879

Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) gmt_ofs and (2) language parameters. NOTE: the page parameter is already covered by CVE-2006-1913. NOTE: it was later reported that 3.50 is also affected.

• CWE-79

• http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html
• http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.htmlExploit
• http://secunia.com/advisories/16337Vendor Advisory
• http://www.securityfocus.com/bid/28523
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43562
• http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html
• http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.htmlExploit
• http://secunia.com/advisories/16337Vendor Advisory
• http://www.securityfocus.com/bid/28523
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43562

Published

Mar 31, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4873Multiple stack-based buffer overflows in the phpcups PHP mod…
• CVE-2005-4874The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP…
• CVE-2005-4875TYPO3 3.8.0 and earlier allows remote attackers to obtain se…
• CVE-2005-4876Cross-site scripting (XSS) vulnerability in the login form (…
• CVE-2005-4877Cross-site scripting (XSS) vulnerability in the login form (…
• CVE-2005-4878Multiple cross-site scripting (XSS) vulnerabilities in (1) a…
• CVE-2005-4880Jax Guestbook 3.1 and 3.31 stores sensitive information unde…
• CVE-2005-4881The netlink subsystem in the Linux kernel 2.4.x before 2.4.3…
• CVE-2005-4882tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used i…
• CVE-2005-4883Race condition in Philippe Jounin Tftpd32 before 2.80 allows…
• CVE-2005-4884Unspecified vulnerability in the Oracle OLAP component in Or…
• CVE-2005-4885Unspecified vulnerability on certain Sun StorEdge 6130 (SE61…