CVE-2005-4333 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.8% (pctl 78)
Patch early
A public exploit exists.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.78% — more likely to be exploited than 78% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-12-17 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| binary-concepts | binary board system |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities | 2005-12-16 |
| exploit-db | Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities | 2005-12-16 |
| exploit-db | Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting | 2005-12-16 |
References
- http://pridels0.blogspot.com/2005/12/binary-board-system-xss-vuln.html
- http://www.osvdb.org/21893
- http://www.osvdb.org/21894
- http://www.osvdb.org/21895
- http://www.securityfocus.com/bid/15913
- http://pridels0.blogspot.com/2005/12/binary-board-system-xss-vuln.html
- http://www.osvdb.org/21893
- http://www.osvdb.org/21894
- http://www.osvdb.org/21895
- http://www.securityfocus.com/bid/15913
→ the Explorer · watch your stack · NVD