CVE-2005-4485
ProjectApp <3.3 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp.
Exploits (7)
References (11)
Scores
EPSS
0.0097
EPSS Percentile
76.4%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
iatek/projectapp
< 3.3
Timeline
Published
Dec 22, 2005
Tracked Since
Feb 18, 2026