{"api_version":"1","generated_at":"2026-07-23T11:29:27+00:00","cve":"CVE-2005-0495","urls":{"html":"https://cve.report/CVE-2005-0495","api":"https://cve.report/api/cve/CVE-2005-0495.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0495","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0495"},"summary":{"title":"CVE-2005-0495","description":"Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-02-19 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19420","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19420","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1013243","name":"http://securitytracker.com/id?1013243","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"SecurityTracker.com Archives - Zeroboard Input Validation Holes in 'zboard.php' and 'view_image.php' Permit Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=110884332105513&w=2","name":"http://marc.info/?l=bugtraq&m=110884332105513&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Multiples vulnerability in ZeroBoard,' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0495","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0495","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"495","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zeroboard","cpe5":"zeroboard","cpe6":"4.1_pl2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"495","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zeroboard","cpe5":"zeroboard","cpe6":"4.1_pl3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"495","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zeroboard","cpe5":"zeroboard","cpe6":"4.1_pl4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"495","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zeroboard","cpe5":"zeroboard","cpe6":"4.1_pl5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"495","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zeroboard","cpe5":"zeroboard","cpe6":"4.1_pl6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:13:54.455Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"zeroboard-xss(19420)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19420"},{"name":"20050219 Multiples vulnerability in ZeroBoard,","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=110884332105513&w=2"},{"name":"1013243","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013243"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-02-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"zeroboard-xss(19420)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19420"},{"name":"20050219 Multiples vulnerability in ZeroBoard,","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=110884332105513&w=2"},{"name":"1013243","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013243"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-0495","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"zeroboard-xss(19420)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19420"},{"name":"20050219 Multiples vulnerability in ZeroBoard,","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=110884332105513&w=2"},{"name":"1013243","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013243"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-0495","datePublished":"2005-02-21T05:00:00.000Z","dateReserved":"2005-02-21T00:00:00.000Z","dateUpdated":"2024-08-07T21:13:54.455Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-02-19 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*","matchCriteriaId":"021147FB-D153-440D-95F2-B812FB9DEA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*","matchCriteriaId":"ABAEFB19-C049-4C09-89CF-00E128FEC5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*","matchCriteriaId":"D9FC71F5-C279-40A8-ABC3-5A141D7DF419"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*","matchCriteriaId":"837FA51A-A0C2-4BC0-9349-DB220BBB7A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl6:*:*:*:*:*:*:*","matchCriteriaId":"67C7E8DA-5108-4928-B05E-70827B5F39B5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"495","Ordinal":"1","Title":"CVE-2005-0495","CVE":"CVE-2005-0495","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"495","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.","Type":"Description","Title":"CVE-2005-0495"},{"CveYear":"2005","CveId":"495","Ordinal":"2","NoteData":"2005-02-21","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"495","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}