CVE-2005-1403

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-03 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.

References

http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html
http://secunia.com/advisories/15155
http://securitytracker.com/id?1013836
http://www.osvdb.org/15892
http://www.osvdb.org/15893
http://www.osvdb.org/15894
http://www.securityfocus.com/bid/13419
http://www.securityfocus.com/bid/13425
http://www.securityfocus.com/bid/13426
http://www.securityfocus.com/bid/13427
http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html
http://secunia.com/advisories/15155

Get alerted when CVE-2005-1403 or the next vulnerability affects your stack