CVE-2005-4574

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.74%

Published

Dec 29, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBPaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter.

Affected Products (5)

paperthin · commonspot_content_servervulnerable

References (10)

http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html

http://secunia.com/advisories/18257

Vendor Advisory

http://www.osvdb.org/21931

Exploit

http://www.securityfocus.com/bid/16071

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/23864

http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html

http://secunia.com/advisories/18257

Vendor Advisory

http://www.osvdb.org/21931

Exploit

http://www.securityfocus.com/bid/16071

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/23864

KEV Catalog EPSS Scores Vendors All CVEs