Unscored CVE-2005-2894 EUVD-2005-2894GHSA-2wc8-2hmm-w3qm

Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to…

Published Sep 14, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field.

References

14766 vdb-entry
20050907 PBLang 4.65 (possibly prior versions) remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure mailing-list
pblang-setcookie-xss(22190) vdb-entry