Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php or (2) the template.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gravity Board X Development Team | Gravity Board X | 1.1 |
References
- http://marc.info/?l=bugtraq&m=112351740803443&w=2
- http://securitytracker.com/alerts/2005/Aug/1014631.htmlExploit
- http://www.securityfocus.com/bid/14497
- http://marc.info/?l=bugtraq&m=112351740803443&w=2
- http://securitytracker.com/alerts/2005/Aug/1014631.htmlExploit
- http://www.securityfocus.com/bid/14497
FAQ
What is CVE-2005-2563?
CVE-2005-2563 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php or (2)...
How severe is CVE-2005-2563?
CVE-2005-2563 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-2563?
Check the references section above for vendor advisories and patch information. Affected products include: Gravity Board X Development Team Gravity Board X.