CVE-2005-4336

no score yetEPSS 1.3%

courseforum projectforum: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) originalpageid parameter in admin/newpage.html associated with a group.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2005-12-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

courseforum:projectforum

References

http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html
http://secunia.com/advisories/18071
http://www.osvdb.org/21733
http://www.osvdb.org/21734
http://www.securityfocus.com/bid/15850

Check your stack JSON