SecuritySpace - CVE-2005-2004

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2005-2004

Description: Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref parameter to login.php, (2) id or (3) page parameter to viewtopic.php, id parameter to (4) profile.php, (5) newpost.php, (6) email.php, (7) icq.php, or (8) aol.php, (9) t_id parameter to newpost.php, (10) ref parameter to getpass.php, or (11) sText parameter to search.php.

Test IDs: 1.3.6.1.4.1.25623.1.0.19498

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2005-2004
Bugtraq: 20050616 M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD (Google Search)
http://marc.info/?l=bugtraq&m=111893777504821&w=2
http://secunia.com/advisories/15732

CVE ID:	CVE-2005-2004
Description:	Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref parameter to login.php, (2) id or (3) page parameter to viewtopic.php, id parameter to (4) profile.php, (5) newpost.php, (6) email.php, (7) icq.php, or (8) aol.php, (9) t_id parameter to newpost.php, (10) ref parameter to getpass.php, or (11) sText parameter to search.php.
Test IDs:	1.3.6.1.4.1.25623.1.0.19498
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2004 Bugtraq: 20050616 M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD (Google Search) http://marc.info/?l=bugtraq&m=111893777504821&w=2 http://secunia.com/advisories/15732