Unscored CVE-2005-0485 EUVD-2005-0486GHSA-86q3-5fx8-mg6m

Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and…

Published Feb 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter.

References

12576 vdb-entry
panews-commentphp-xss(19359) vdb-entry
20050216 [PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability mailing-list