CVE-2005-1075 | Vulnerability Database | Aqua Security

Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.

Affected Software

Name	Vendor	Start Version	End Version
Radbids	Radscripts	2 (including)	2 (including)

References

http://secunia.com/advisories/14906
http://www.digitalparadox.org/advisories/rga.txt
http://www.osvdb.org/15430
http://www.osvdb.org/15431
http://www.securityfocus.com/archive/1/395527
http://www.securityfocus.com/bid/13080
https://exchange.xforce.ibmcloud.com/vulnerabilities/20038
http://secunia.com/advisories/14906
http://www.digitalparadox.org/advisories/rga.txt
http://www.osvdb.org/15430
http://www.osvdb.org/15431
http://www.securityfocus.com/archive/1/395527
http://www.securityfocus.com/bid/13080
https://exchange.xforce.ibmcloud.com/vulnerabilities/20038

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-1075
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html