CVE-2005-1508

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-11 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) month or (2) annee parameters to the news module, (3) nbractif or (4) annee parameters to the stats module, (5) id parameter to profil.php, (6) mb_lettre or (7) lettre parameter to memberlist.php, or (8) chaine_search, or (9) auteur_search parameter to the recherche module.

Affected products

Pwsphp: 1.2.2

References

http://marc.info/?l=bugtraq&m=111565808024581&w=2
http://secunia.com/advisories/15315
http://www.osvdb.org/16228
http://www.osvdb.org/16229
http://www.osvdb.org/16230
http://www.osvdb.org/16231
http://www.osvdb.org/16232
http://www.vupen.com/english/advisories/2005/0503
https://exchange.xforce.ibmcloud.com/vulnerabilities/20500
http://marc.info/?l=bugtraq&m=111565808024581&w=2
http://secunia.com/advisories/15315
http://www.osvdb.org/16228

Get alerted when CVE-2005-1508 or the next vulnerability affects your stack