← Database

CVE-2005-3814

MEDIUM CVSS: 4.3 Published: 2005-11-26 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php.

Affected Platforms

Orbitscripts Smartppc Pro

Weakness Type

NVD-CWE-Other

References