CVE-2005-2488

no score yetEPSS 1.8%

Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
Published: 2005-08-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

web_content_management:web_content_management_news_system

References

http://secunia.com/advisories/16317
http://securitytracker.com/id?1014616
http://www.rgod.altervista.org/webc.html
http://www.securityfocus.com/bid/14464
https://exchange.xforce.ibmcloud.com/vulnerabilities/21689

Check your stack JSON