CVE-2005-4460 EXPLOIT
5.1
MEDIUM · CVSS 2.0 · EPSS 2.1% (pctl 81)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php.
Scoring
| CVSS | 5.1 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:P/I:P/A:P |
| EPSS | 2.09% — more likely to be exploited than 81% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-12-21 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| beehive forum | beehive forum |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities | 2005-12-21 |
References
- http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log
- http://secunia.com/advisories/18154
- http://www.securityfocus.com/archive/1/419988/100/0/threaded
- http://www.securityfocus.com/bid/16002
- http://www.vupen.com/english/advisories/2005/3043
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23879
- http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log
- http://secunia.com/advisories/18154
- http://www.securityfocus.com/archive/1/419988/100/0/threaded
- http://www.securityfocus.com/bid/16002
- http://www.vupen.com/english/advisories/2005/3043
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23879
→ the Explorer · watch your stack · NVD