CVE-2005-2441

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-03 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.

Affected products

Vbzoom: all versions

References

http://marc.info/?l=bugtraq&m=112300586019568&w=2
http://secunia.com/advisories/16220
http://securitytracker.com/id?1014614
http://www.osvdb.org/18662
http://www.osvdb.org/18663
http://www.securityfocus.com/archive/1/426874/100/0/threaded
http://www.securityfocus.com/bid/14423
https://exchange.xforce.ibmcloud.com/vulnerabilities/21680
http://marc.info/?l=bugtraq&m=112300586019568&w=2
http://secunia.com/advisories/16220
http://securitytracker.com/id?1014614
http://www.osvdb.org/18662

Get alerted when CVE-2005-2441 or the next vulnerability affects your stack