CVE-2005-4138

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-09 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter in misc.php.

References

http://kapda.ir/advisory-149.html
http://www.securityfocus.com/archive/1/418837/100/0/threaded
http://www.securityfocus.com/bid/15763
http://kapda.ir/advisory-149.html
http://www.securityfocus.com/archive/1/418837/100/0/threaded
http://www.securityfocus.com/bid/15763

Get alerted when CVE-2005-4138 or the next vulnerability affects your stack