CVE-2005-4063

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.70%

Published

Dec 7, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBNetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categoryname parameters to search.asp.

Affected Products (1)

netauctionhelp · netauctionhelpvulnerable

References (10)

http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html

http://secunia.com/advisories/17902

http://www.osvdb.org/21474

http://www.securityfocus.com/bid/15737

http://www.vupen.com/english/advisories/2005/2761

http://pridels0.blogspot.com/2005/12/netauctionhelp-v30-xss-vuln.html

http://secunia.com/advisories/17902

http://www.osvdb.org/21474

http://www.securityfocus.com/bid/15737

http://www.vupen.com/english/advisories/2005/2761

KEV Catalog EPSS Scores Vendors All CVEs