{"api_version":"1","generated_at":"2026-07-23T07:35:12+00:00","cve":"CVE-2005-1975","urls":{"html":"https://cve.report/CVE-2005-1975","api":"https://cve.report/api/cve/CVE-2005-1975.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-1975","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-1975"},"summary":{"title":"CVE-2005-1975","description":"Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-06-16 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/13960","name":"http://www.securityfocus.com/bid/13960","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Annuaire 1Two Commentaires.PHP Multiple HTML Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1014187","name":"http://securitytracker.com/id?1014187","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Annuaire 1Two Input Validation Holes Permit Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html","name":"http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gooroo - Not found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/13612","name":"http://www.securityfocus.com/bid/13612","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"1Two News Multiple HTML Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/15708","name":"http://secunia.com/advisories/15708","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Secunia - Advisories - Annuaire 1Two Cross-Site Scripting and Script Insertion","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/13961","name":"http://www.securityfocus.com/bid/13961","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Annuaire 1Two Index.PHP Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1975","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1975","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"1975","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"annuaire","cpe5":"1two","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"1975","vulnerable":"1","versionEndIncluding":"1.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"annuaire","cpe5":"1two","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:06:57.912Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1014187","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1014187"},{"name":"15708","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/15708"},{"name":"13612","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13612"},{"name":"13960","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13960"},{"name":"13961","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13961"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-06-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-06-23T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1014187","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1014187"},{"name":"15708","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/15708"},{"name":"13612","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13612"},{"name":"13960","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13960"},{"name":"13961","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13961"},{"tags":["x_refsource_MISC"],"url":"http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-1975","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1014187","refsource":"SECTRACK","url":"http://securitytracker.com/id?1014187"},{"name":"15708","refsource":"SECUNIA","url":"http://secunia.com/advisories/15708"},{"name":"13612","refsource":"BID","url":"http://www.securityfocus.com/bid/13612"},{"name":"13960","refsource":"BID","url":"http://www.securityfocus.com/bid/13960"},{"name":"13961","refsource":"BID","url":"http://www.securityfocus.com/bid/13961"},{"name":"http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html","refsource":"MISC","url":"http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-1975","datePublished":"2005-06-14T04:00:00.000Z","dateReserved":"2005-06-14T00:00:00.000Z","dateUpdated":"2024-08-07T22:06:57.912Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-06-16 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:annuaire:1two:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"98EC36FA-F6BE-4C81-AA37-6ED9A747EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:annuaire:1two:1.0:*:*:*:*:*:*:*","matchCriteriaId":"23CE97A3-885C-43CF-9F78-6BB2380E208B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"1975","Ordinal":"1","Title":"CVE-2005-1975","CVE":"CVE-2005-1975","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"1975","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php.","Type":"Description","Title":"CVE-2005-1975"},{"CveYear":"2005","CveId":"1975","Ordinal":"2","NoteData":"2005-06-14","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"1975","Ordinal":"3","NoteData":"2005-06-23","Type":"Other","Title":"Modified"}]}}}