CVE-2005-3406
Published Nov 1, 2005
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:butterfat:phpesp:1.3_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04F2AC68-8BBB-498A-9E64-F34EB55C70B3" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84B064D5-DEE7-4C4A-B3FC-D50834DEE821" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEE6F403-FAC0-4683-B8A9-7CB2AA284EBA" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84E945E7-1EB2-430B-B1D7-09213CF2D6F1" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.4_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8A473E0-9F20-4BE6-A78B-1644B26F19FB" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.5_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7902B990-5232-46F0-8B8A-6E720F3A6D9E" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B36C4642-4A06-4E0A-8C8E-0D09AF33278C" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AFB7AA4-FD70-4F4F-BDB1-372D5A8D0C9A" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5DDAEA0-A1B5-49E2-98DD-5272C38E6BA3" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.6.1_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70CE4811-C15A-48F8-8E50-268911C24108" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.6_final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DF8CB9F-DB55-45B5-812F-DBB3C89FA7C5" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EE2AB2F-625C-4668-A50A-7C1EC2333153" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A18FF2EA-53C5-4EC4-A368-BC1420678B32" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "963CF065-3E46-44AE-9053-413E68C48236" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D65CCEE7-0809-460E-B4B1-9D03C49C4641" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5E0B6F6-11EF-478E-A63C-343CB3C9C70A" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23572B9F-23E6-40D7-863B-C2AE15D6BD2A" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0C91172-6CA8-44A6-86CC-B525DF88D52D" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D13D3A9E-60DF-442B-A629-C2BBFED7A320" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7773515F-16F1-47D7-BF45-66CBF08584F8" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DC3C204-CA3E-4901-98CC-FE84EC1F1CD3" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7_dev:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BFA40B6-E757-4556-ABAC-EFE1A72B8B3F" }, { "criteria": "cpe:2.3:a:butterfat:phpesp:1.7_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7431C81C-CF1E-48F5-B42C-8B6796D1DCF6" } ], "operator": "OR" } ] } ]