CVE-2005-1672

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-19 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the (1) find parameter to index.php, (2) name or (3) message field of a chat request, or (4) the message body when opening a trouble ticket.

Affected products

Ubertec Help Center Live: all versions

References

http://www.gulftech.org/?node=research&article_id=00076-05172005
http://www.securityfocus.com/archive/1/398457
http://www.gulftech.org/?node=research&article_id=00076-05172005
http://www.securityfocus.com/archive/1/398457

Get alerted when CVE-2005-1672 or the next vulnerability affects your stack