CVE-2005-3902 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 2.2% (pctl 82)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing script.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 2.19% — more likely to be exploited than 82% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-11-29 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| virtual hosting control system | virtual hosting control system |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Virtual Hosting Control System 2.2/2.4 - Error Message Cross-Site Scripting | 2005-11-22 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.html
- http://marc.info/?l=bugtraq&m=113269811630139&w=2
- http://moritz-naumann.com/adv/0006/vhcsxss/0006.txt
- http://secunia.com/advisories/17704/
- http://securityreason.com/securityalert/202
- http://www.osvdb.org/21060
- http://www.securityfocus.com/bid/15538
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23209
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.html
- http://marc.info/?l=bugtraq&m=113269811630139&w=2
- http://moritz-naumann.com/adv/0006/vhcsxss/0006.txt
- http://secunia.com/advisories/17704/
- http://securityreason.com/securityalert/202
- http://www.osvdb.org/21060
- http://www.securityfocus.com/bid/15538
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23209
→ the Explorer · watch your stack · NVD