{"api_version":"1","generated_at":"2026-07-23T15:25:52+00:00","cve":"CVE-2005-2299","urls":{"html":"https://cve.report/CVE-2005-2299","api":"https://cve.report/api/cve/CVE-2005-2299.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-2299","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-2299"},"summary":{"title":"CVE-2005-2299","description":"Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate parameter to search.cfm.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-07-19 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://marc.info/?l=bugtraq&m=112137585701087&w=2","name":"http://marc.info/?l=bugtraq&m=112137585701087&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'XSS in forums Simple Message Board Version 2.0 Beta 1' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/14269","name":"http://www.securityfocus.com/bid/14269","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Simple Message Board Search.CFM Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/14266","name":"http://www.securityfocus.com/bid/14266","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Simple Message Board Forum.CFM Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/14268","name":"http://www.securityfocus.com/bid/14268","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Simple Message Board Thread.CFM Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/14267","name":"http://www.securityfocus.com/bid/14267","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Simple Message Board User.CFM Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1014494","name":"http://securitytracker.com/id?1014494","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - Simple Message Board Input Validation Holes Permit Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2299","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2299","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"2299","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"man_and_machine_ltd.","cpe5":"simple_message_board","cpe6":"2.0_beta1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:22:48.935Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1014494","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1014494"},{"name":"14267","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/14267"},{"name":"20050714 XSS in forums Simple Message Board Version 2.0 Beta 1","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=112137585701087&w=2"},{"name":"14269","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/14269"},{"name":"14266","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/14266"},{"name":"14268","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/14268"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-07-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate parameter to search.cfm."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-10-17T13:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1014494","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1014494"},{"name":"14267","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/14267"},{"name":"20050714 XSS in forums Simple Message Board Version 2.0 Beta 1","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=112137585701087&w=2"},{"name":"14269","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/14269"},{"name":"14266","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/14266"},{"name":"14268","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/14268"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-2299","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate parameter to search.cfm."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1014494","refsource":"SECTRACK","url":"http://securitytracker.com/id?1014494"},{"name":"14267","refsource":"BID","url":"http://www.securityfocus.com/bid/14267"},{"name":"20050714 XSS in forums Simple Message Board Version 2.0 Beta 1","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=112137585701087&w=2"},{"name":"14269","refsource":"BID","url":"http://www.securityfocus.com/bid/14269"},{"name":"14266","refsource":"BID","url":"http://www.securityfocus.com/bid/14266"},{"name":"14268","refsource":"BID","url":"http://www.securityfocus.com/bid/14268"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-2299","datePublished":"2005-07-19T04:00:00.000Z","dateReserved":"2005-07-19T00:00:00.000Z","dateUpdated":"2024-08-07T22:22:48.935Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-07-19 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:man_and_machine_ltd.:simple_message_board:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"5BB59859-A7C9-401E-9658-978F5EB1D351"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"2299","Ordinal":"1","Title":"CVE-2005-2299","CVE":"CVE-2005-2299","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"2299","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate parameter to search.cfm.","Type":"Description","Title":"CVE-2005-2299"},{"CveYear":"2005","CveId":"2299","Ordinal":"2","NoteData":"2005-07-19","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"2299","Ordinal":"3","NoteData":"2016-10-17","Type":"Other","Title":"Modified"}]}}}