CVE-2005-1030

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.

Affected products

Active Web Softwares Active Auction House: 7.1

References

http://digitalparadox.org/advisories/aass.txt
http://marc.info/?l=bugtraq&m=111280834000432&w=2
http://secunia.com/advisories/14839
http://www.osvdb.org/15284
http://www.osvdb.org/15285
http://www.osvdb.org/15286
http://www.osvdb.org/15287
http://www.securityfocus.com/bid/13036
http://www.securityfocus.com/bid/13038
http://www.securityfocus.com/bid/13039
http://www.securitytracker.com/alerts/2005/Apr/1013649.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/19975

Get alerted when CVE-2005-1030 or the next vulnerability affects your stack