{"api_version":"1","generated_at":"2026-07-23T07:41:58+00:00","cve":"CVE-2005-2336","urls":{"html":"https://cve.report/CVE-2005-2336","api":"https://cve.report/api/cve/CVE-2005-2336.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-2336","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-2336"},"summary":{"title":"CVE-2005-2336","description":"Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via \"missing pages\" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803.","state":"PUBLISHED","assigner":"certcc","published_at":"2005-09-06 21:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://hikiwiki.org/en/advisory20050804.html","name":"http://hikiwiki.org/en/advisory20050804.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Hiki - Hiki Advisory 2005-08-04","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/17075","name":"http://secunia.com/advisories/17075","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Secunia - Advisories - Hiki Page Name Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/15021","name":"http://www.securityfocus.com/bid/15021","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Hiki Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://jvn.jp/en/jp/JVN38138980/index.html","name":"http://jvn.jp/en/jp/JVN38138980/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#38138980 Hiki cross-site scripting vulnerability","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2336","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2336","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"2336","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hiki","cpe5":"hiki","cpe6":"0.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"2336","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hiki","cpe5":"hiki","cpe6":"0.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"2336","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hiki","cpe5":"hiki","cpe6":"0.8.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:22:48.935Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"JVN#38138980","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN38138980/index.html"},{"name":"15021","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15021"},{"name":"17075","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17075"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://hikiwiki.org/en/advisory20050804.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-08-04T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via \"missing pages\" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-11-02T10:00:00.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"name":"JVN#38138980","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN38138980/index.html"},{"name":"15021","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15021"},{"name":"17075","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17075"},{"tags":["x_refsource_CONFIRM"],"url":"http://hikiwiki.org/en/advisory20050804.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2005-2336","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via \"missing pages\" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"JVN#38138980","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN38138980/index.html"},{"name":"15021","refsource":"BID","url":"http://www.securityfocus.com/bid/15021"},{"name":"17075","refsource":"SECUNIA","url":"http://secunia.com/advisories/17075"},{"name":"http://hikiwiki.org/en/advisory20050804.html","refsource":"CONFIRM","url":"http://hikiwiki.org/en/advisory20050804.html"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2005-2336","datePublished":"2005-09-06T04:00:00.000Z","dateReserved":"2005-07-21T00:00:00.000Z","dateUpdated":"2024-08-07T22:22:48.935Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-09-06 21:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hiki:hiki:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"8A025628-6766-4402-A9B5-EE8983BC0283"},{"vulnerable":true,"criteria":"cpe:2.3:a:hiki:hiki:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEBA2F7-AA11-448B-AB89-77A2B51426C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hiki:hiki:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3F760D12-A498-4E19-8D54-A7D46709B757"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"2336","Ordinal":"1","Title":"CVE-2005-2336","CVE":"CVE-2005-2336","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"2336","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via \"missing pages\" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803.","Type":"Description","Title":"CVE-2005-2336"},{"CveYear":"2005","CveId":"2336","Ordinal":"2","NoteData":"2005-09-06","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"2336","Ordinal":"3","NoteData":"2005-11-02","Type":"Other","Title":"Modified"}]}}}