CVE-2005-4490

SCOOP! <2.3 - XSS

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword and (2) invalid parameter to articleSearch.asp; (3) username and (4) invalid parameter to lostPassword.asp; (5) Username, (6) Password, and (7) invalid parameter to account_login.asp; (8) area, (9) articleZoneID, (10) r, and (11) invalid parameters to category.asp; and invalid parameters to (12) articleZone.asp, (13) prePurchaserRegistration.asp, and (14) requestDemo.asp.

Exploits (7)

exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26946
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26945
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26941
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26943
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26944
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26940
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsasp
https://www.exploit-db.com/exploits/26942

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16015
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/3049

Scores

EPSS 0.0053
EPSS Percentile 67.1%

Details

Status published
Products (1)
commercial_interactive_media/scoop < 2.3
Published Dec 22, 2005
Tracked Since Feb 18, 2026