14702Third-party advisory
http://secunia.com/advisories/14702 CVE-2005-0883
DigitalHive 2.0 - 'msg.php' Cross-Site Scripting
Record summary
CVE-2005-0883 has a selected CVSS score of 4.3; EIP currently links 2 catalogued exploits.
Description
Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBDigitalHive 2.0 - 'msg.php' Cross-Site ScriptingExploitDB exploitby benji lemienNot analyzed1 file
ExploitDBDigitalHive 2.0 - 'membres.php?mt' Cross-Site ScriptingExploitDB exploitby benji lemienNot analyzed1 file
References
51013516vdb entry
http://securitytracker.com/id?1013516 12883vdb entry
http://www.securityfocus.com/bid/12883 digitalhive-basephp-xss(19803)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19803 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-0883