CVE-2005-3552 - Vulnerability Details - OpenCVE

Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.01419.

Key SSVC decision points have not yet been added.

Vendors	Products
Phpkit	Phpkit

Configuration 1 [-]

cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html
http://secunia.com/advisories/17479
http://securitytracker.com/id?1015167
http://www.hardened-php.net/advisory_212005.80.html
http://www.osvdb.org/20553
http://www.osvdb.org/20554
http://www.osvdb.org/20555
http://www.osvdb.org/20556
http://www.osvdb.org/20557
http://www.osvdb.org/20558
http://www.osvdb.org/20559
http://www.securityfocus.com/bid/15354
http://www.vupen.com/english/advisories/2005/2344
https://exchange.xforce.ibmcloud.com/vulnerabilities/23003
https://exchange.xforce.ibmcloud.com/vulnerabilities/23004
https://exchange.xforce.ibmcloud.com/vulnerabilities/23006
https://exchange.xforce.ibmcloud.com/vulnerabilities/23007
https://exchange.xforce.ibmcloud.com/vulnerabilities/23008
https://exchange.xforce.ibmcloud.com/vulnerabilities/23009

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-16T07:37:00

Updated: 2024-08-07T23:17:23.351Z

Reserved: 2005-11-16T00:00:00

Link: CVE-2005-3552

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-11-16T07:42:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-3552

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-07T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "phpkit-profile-userinfo-xss(23003)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003"}, {"name": "phpkit-imcenter-xss(23008)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008"}, {"name": "1015167", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015167"}, {"name": "20553", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20553"}, {"name": "15354", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15354"}, {"name": "phpkit-referer-xss(23006)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006"}, {"name": "20558", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20558"}, {"name": "phpkit-html-tags-xss(23007)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007"}, {"name": "20051105 Advisory 21/2005: Multiple vulnerabilities in PHPKIT", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html"}, {"name": "phpkit-guestbook-xss(23009)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009"}, {"name": "20555", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20555"}, {"name": "ADV-2005-2344", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2344"}, {"name": "20554", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20554"}, {"name": "20559", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20559"}, {"name": "17479", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17479"}, {"tags": ["x_refsource_MISC"], "url": "http://www.hardened-php.net/advisory_212005.80.html"}, {"name": "20556", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20556"}, {"name": "phpkit-admin-xss(23004)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004"}, {"name": "20557", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20557"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3552", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "phpkit-profile-userinfo-xss(23003)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003"}, {"name": "phpkit-imcenter-xss(23008)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008"}, {"name": "1015167", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015167"}, {"name": "20553", "refsource": "OSVDB", "url": "http://www.osvdb.org/20553"}, {"name": "15354", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15354"}, {"name": "phpkit-referer-xss(23006)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006"}, {"name": "20558", "refsource": "OSVDB", "url": "http://www.osvdb.org/20558"}, {"name": "phpkit-html-tags-xss(23007)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007"}, {"name": "20051105 Advisory 21/2005: Multiple vulnerabilities in PHPKIT", "refsource": "BUGTRAQ", "url": "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html"}, {"name": "phpkit-guestbook-xss(23009)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009"}, {"name": "20555", "refsource": "OSVDB", "url": "http://www.osvdb.org/20555"}, {"name": "ADV-2005-2344", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2344"}, {"name": "20554", "refsource": "OSVDB", "url": "http://www.osvdb.org/20554"}, {"name": "20559", "refsource": "OSVDB", "url": "http://www.osvdb.org/20559"}, {"name": "17479", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17479"}, {"name": "http://www.hardened-php.net/advisory_212005.80.html", "refsource": "MISC", "url": "http://www.hardened-php.net/advisory_212005.80.html"}, {"name": "20556", "refsource": "OSVDB", "url": "http://www.osvdb.org/20556"}, {"name": "phpkit-admin-xss(23004)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004"}, {"name": "20557", "refsource": "OSVDB", "url": "http://www.osvdb.org/20557"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:17:23.351Z"}, "title": "CVE Program Container", "references": [{"name": "phpkit-profile-userinfo-xss(23003)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003"}, {"name": "phpkit-imcenter-xss(23008)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008"}, {"name": "1015167", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015167"}, {"name": "20553", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20553"}, {"name": "15354", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15354"}, {"name": "phpkit-referer-xss(23006)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006"}, {"name": "20558", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20558"}, {"name": "phpkit-html-tags-xss(23007)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007"}, {"name": "20051105 Advisory 21/2005: Multiple vulnerabilities in PHPKIT", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html"}, {"name": "phpkit-guestbook-xss(23009)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009"}, {"name": "20555", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20555"}, {"name": "ADV-2005-2344", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2344"}, {"name": "20554", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20554"}, {"name": "20559", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20559"}, {"name": "17479", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17479"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.hardened-php.net/advisory_212005.80.html"}, {"name": "20556", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20556"}, {"name": "phpkit-admin-xss(23004)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004"}, {"name": "20557", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20557"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3552", "datePublished": "2005-11-16T07:37:00", "dateReserved": "2005-11-16T00:00:00", "dateUpdated": "2024-08-07T23:17:23.351Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*", "matchCriteriaId": "6770D817-F1BA-4286-A9CB-3F855CE6E5EB", "versionEndIncluding": "1.6.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) login/userinfo.php, (3) admin/admin.php, (4) imcenter.php, and the (5) referer statistics, the (6) HTML title element and (7) logo alt attributes in forum postings, and the (8) Homepage field in the Guestbook."}], "id": "CVE-2005-3552", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-16T07:42:00.000", "references": [{"source": "cve@mitre.org", "url": "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17479"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015167"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.hardened-php.net/advisory_212005.80.html"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20553"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20554"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20555"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20556"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20557"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20558"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20559"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15354"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2005/2344"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17479"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015167"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.hardened-php.net/advisory_212005.80.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20553"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20554"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20555"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20556"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20557"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20558"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20559"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15354"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2005/2344"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23003"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23004"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23006"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23007"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23008"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23009"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}