{"api_version":"1","generated_at":"2026-07-23T05:02:33+00:00","cve":"CVE-2005-1644","urls":{"html":"https://cve.report/CVE-2005-1644","api":"https://cve.report/api/cve/CVE-2005-1644.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-1644","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-1644"},"summary":{"title":"CVE-2005-1644","description":"Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) livreornom, (2) livreoremail, or (3) livreormessage parameters.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-18 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20589","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20589","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/16717","name":"http://www.osvdb.org/16717","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/13631","name":"http://www.securityfocus.com/bid/13631","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"1Two Livre D'Or Guestbook.PHP Multiple HTML Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1013971","name":"http://securitytracker.com/id?1013971","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"1Two Livre d'Or Input Validation Holes Permit Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1644","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1644","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"1644","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"1two","cpe5":"livre_d_or","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:59:23.927Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"16717","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/16717"},{"name":"13631","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13631"},{"name":"1two-livere-dor-guestbook-xss(20589)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20589"},{"name":"1013971","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013971"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-05-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) livreornom, (2) livreoremail, or (3) livreormessage parameters."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"16717","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/16717"},{"name":"13631","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13631"},{"name":"1two-livere-dor-guestbook-xss(20589)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20589"},{"name":"1013971","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013971"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-1644","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) livreornom, (2) livreoremail, or (3) livreormessage parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"16717","refsource":"OSVDB","url":"http://www.osvdb.org/16717"},{"name":"13631","refsource":"BID","url":"http://www.securityfocus.com/bid/13631"},{"name":"1two-livere-dor-guestbook-xss(20589)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20589"},{"name":"1013971","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013971"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-1644","datePublished":"2005-05-18T04:00:00.000Z","dateReserved":"2005-05-17T00:00:00.000Z","dateUpdated":"2024-08-07T21:59:23.927Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-18 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1two:livre_d_or:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FA08B191-5211-4E6E-BC50-188DF8433161"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"1644","Ordinal":"1","Title":"CVE-2005-1644","CVE":"CVE-2005-1644","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"1644","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) livreornom, (2) livreoremail, or (3) livreormessage parameters.","Type":"Description","Title":"CVE-2005-1644"},{"CveYear":"2005","CveId":"1644","Ordinal":"2","NoteData":"2005-05-18","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"1644","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}