$ cve CVE-2005-1403 JSON

CVE-2005-1403 EXPLOIT

6.8

MEDIUM · CVSS 2.0 · EPSS 5.7% (pctl 93)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.

Scoring

CVSS	6.8 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS	5.73% — more likely to be exploited than 93% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-05-03
Last modified	2026-06-16

Affected (1)

Vendor	Product
just williams	amazon webstore

Public exploits

Source	Title	Date
exploit-db	Just William's Amazon Webstore - 'Closeup.php?Image' Cross-Site Scripting	2005-04-28
exploit-db	Just William's Amazon Webstore - 'CurrentIsExpanded' Cross-Site Scripting	2005-04-28
exploit-db	Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting	2005-04-28
exploit-db	Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting	2005-04-28

References

→ the Explorer · watch your stack · NVD