{"api_version":"1","generated_at":"2026-07-23T08:41:04+00:00","cve":"CVE-2005-1030","urls":{"html":"https://cve.report/CVE-2005-1030","api":"https://cve.report/api/cve/CVE-2005-1030.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-1030","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-1030"},"summary":{"title":"CVE-2005-1030","description":"Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-02 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://marc.info/?l=bugtraq&m=111280834000432&w=2","name":"http://marc.info/?l=bugtraq&m=111280834000432&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Active Auction House has multiple Sql injection, error and XSS' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/13038","name":"http://www.securityfocus.com/bid/13038","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Active Auction House Sendpassword.ASP Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://digitalparadox.org/advisories/aass.txt","name":"http://digitalparadox.org/advisories/aass.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19975","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19975","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/14839","name":"http://secunia.com/advisories/14839","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"Active Auction House Cross-Site Scripting and SQL Injection - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/15284","name":"http://www.osvdb.org/15284","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/15286","name":"http://www.osvdb.org/15286","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/15287","name":"http://www.osvdb.org/15287","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/13036","name":"http://www.securityfocus.com/bid/13036","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Active Auction House ReturnURL Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/13039","name":"http://www.securityfocus.com/bid/13039","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Active Auction House WatchThisItem.ASP Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/15285","name":"http://www.osvdb.org/15285","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securitytracker.com/alerts/2005/Apr/1013649.html","name":"http://www.securitytracker.com/alerts/2005/Apr/1013649.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - Active Auction House Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1030","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1030","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"1030","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"active_web_softwares","cpe5":"active_auction_house","cpe6":"7.1","cpe7":"*","cpe8":"pro","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:35:59.653Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"15287","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15287"},{"name":"13038","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13038"},{"name":"15286","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15286"},{"name":"13036","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13036"},{"name":"13039","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13039"},{"name":"1013649","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/alerts/2005/Apr/1013649.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://digitalparadox.org/advisories/aass.txt"},{"name":"20050406 Active Auction House has multiple Sql injection, error and XSS","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=111280834000432&w=2"},{"name":"15284","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15284"},{"name":"15285","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15285"},{"name":"aah-multiple-scripts-xss(19975)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19975"},{"name":"14839","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/14839"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-04-06T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"15287","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15287"},{"name":"13038","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13038"},{"name":"15286","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15286"},{"name":"13036","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13036"},{"name":"13039","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13039"},{"name":"1013649","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/alerts/2005/Apr/1013649.html"},{"tags":["x_refsource_MISC"],"url":"http://digitalparadox.org/advisories/aass.txt"},{"name":"20050406 Active Auction House has multiple Sql injection, error and XSS","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=111280834000432&w=2"},{"name":"15284","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15284"},{"name":"15285","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15285"},{"name":"aah-multiple-scripts-xss(19975)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19975"},{"name":"14839","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/14839"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-1030","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"15287","refsource":"OSVDB","url":"http://www.osvdb.org/15287"},{"name":"13038","refsource":"BID","url":"http://www.securityfocus.com/bid/13038"},{"name":"15286","refsource":"OSVDB","url":"http://www.osvdb.org/15286"},{"name":"13036","refsource":"BID","url":"http://www.securityfocus.com/bid/13036"},{"name":"13039","refsource":"BID","url":"http://www.securityfocus.com/bid/13039"},{"name":"1013649","refsource":"SECTRACK","url":"http://www.securitytracker.com/alerts/2005/Apr/1013649.html"},{"name":"http://digitalparadox.org/advisories/aass.txt","refsource":"MISC","url":"http://digitalparadox.org/advisories/aass.txt"},{"name":"20050406 Active Auction House has multiple Sql injection, error and XSS","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=111280834000432&w=2"},{"name":"15284","refsource":"OSVDB","url":"http://www.osvdb.org/15284"},{"name":"15285","refsource":"OSVDB","url":"http://www.osvdb.org/15285"},{"name":"aah-multiple-scripts-xss(19975)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19975"},{"name":"14839","refsource":"SECUNIA","url":"http://secunia.com/advisories/14839"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-1030","datePublished":"2005-04-09T04:00:00.000Z","dateReserved":"2005-04-10T00:00:00.000Z","dateUpdated":"2024-08-07T21:35:59.653Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-02 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:active_web_softwares:active_auction_house:7.1:*:pro:*:*:*:*:*","matchCriteriaId":"F403D596-4206-4B53-9796-BAA23A68B47D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"1030","Ordinal":"1","Title":"CVE-2005-1030","CVE":"CVE-2005-1030","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"1030","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.","Type":"Description","Title":"CVE-2005-1030"},{"CveYear":"2005","CveId":"1030","Ordinal":"2","NoteData":"2005-04-09","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"1030","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}