CVE-2005-1803

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.84%

Published

May 29, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (6)

All weaponized →

Exploit-DBNPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting Exploit-DBNPDS 4.8 < 5.0 - 'faq.php?categories' Cross-Site Scripting Exploit-DBNPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting Exploit-DBNPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting Exploit-DBNPDS 4.8 < 5.0 - 'reviews.php?title' Cross-Site Scripting Exploit-DBNPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, or (2) powerpack_f.php, (3) the sitename parameter to sdv_infos.php, (4) the categories parameter to faq.php, (5) the lettre parameter to the glossaire module, (6) the title parameter to reviews.php, or (7) the image_subject parameter to reply.php.

Affected Products (1)

net_portal_dynamic_system · net_portal_dynamic_systemvulnerable

References (8)

http://securitytracker.com/id?1014073

ExploitPatchVendor Advisory

http://www.npds.org/download.php?op=geninfo&did=115

Vendor Advisory

http://www.osvdb.org/16464

http://www.osvdb.org/16922