CVE-2005-4485

MEDIO 4.3CVE-2005-4485 · Published 22/12/2005 · updated 16/06/2026

En resumen

CVE-2005-4485 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a projectapp (iatek).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 86.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
projectapp iatek	`≤ 3.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp.

References

pridels0.blogspot.com/2005/12/projectapp-mutliple-xss-vuln.html
secunia.com/advisories/18199 · Vendor Advisory
osvdb.org/21962 · Exploit
osvdb.org/21963 · Exploit
osvdb.org/21964 · Exploit
osvdb.org/21965 · Exploit
osvdb.org/21966 · Exploit
osvdb.org/21967 · Exploit
osvdb.org/21968 · Exploit
securityfocus.com/bid/16011 · Exploit
vupen.com/english/advisories/2005/3040 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free