{"api_version":"1","generated_at":"2026-07-23T07:38:37+00:00","cve":"CVE-2005-1483","urls":{"html":"https://cve.report/CVE-2005-1483","api":"https://cve.report/api/cve/CVE-2005-1483.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-1483","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-1483"},"summary":{"title":"CVE-2005-1483","description":"Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-11 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.osvdb.org/16183","name":"http://www.osvdb.org/16183","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1013895","name":"http://securitytracker.com/id?1013895","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - ArticleLive Bugs Let Remote Users Gain Administrative Access, Inject SQL Commands, and Conduct Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/13493","name":"http://www.securityfocus.com/bid/13493","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Interspire ArticleLive Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=111530871724865&w=2","name":"http://marc.info/?l=bugtraq&m=111530871724865&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Authentication bypass, sql injections and xss in ArticleLive 2005' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20430","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20430","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/15250","name":"http://secunia.com/advisories/15250","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Secunia - Advisories - Interspire ArticleLive 2005 Cross-Site Scripting and Security Bypass","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1483","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1483","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"1483","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"interspire","cpe5":"articlelive","cpe6":"2005","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:51:50.257Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20050503 Authentication bypass, sql injections and xss in ArticleLive 2005","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=111530871724865&w=2"},{"name":"13493","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13493"},{"name":"15250","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/15250"},{"name":"articlelive-multiple-xss(20430)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20430"},{"name":"16183","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/16183"},{"name":"1013895","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013895"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-05-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20050503 Authentication bypass, sql injections and xss in ArticleLive 2005","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=111530871724865&w=2"},{"name":"13493","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13493"},{"name":"15250","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/15250"},{"name":"articlelive-multiple-xss(20430)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20430"},{"name":"16183","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/16183"},{"name":"1013895","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013895"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-1483","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20050503 Authentication bypass, sql injections and xss in ArticleLive 2005","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=111530871724865&w=2"},{"name":"13493","refsource":"BID","url":"http://www.securityfocus.com/bid/13493"},{"name":"15250","refsource":"SECUNIA","url":"http://secunia.com/advisories/15250"},{"name":"articlelive-multiple-xss(20430)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20430"},{"name":"16183","refsource":"OSVDB","url":"http://www.osvdb.org/16183"},{"name":"1013895","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013895"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-1483","datePublished":"2005-05-11T04:00:00.000Z","dateReserved":"2005-05-11T00:00:00.000Z","dateUpdated":"2024-08-07T21:51:50.257Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-11 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interspire:articlelive:2005:*:*:*:*:*:*:*","matchCriteriaId":"F8A916F3-5E6B-4A82-A616-BA3C3491CCE7"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"1483","Ordinal":"1","Title":"CVE-2005-1483","CVE":"CVE-2005-1483","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"1483","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.","Type":"Description","Title":"CVE-2005-1483"},{"CveYear":"2005","CveId":"1483","Ordinal":"2","NoteData":"2005-05-11","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"1483","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}