{"api_version":"1","generated_at":"2026-07-24T18:51:29+00:00","cve":"CVE-2005-3730","urls":{"html":"https://cve.report/CVE-2005-3730","api":"https://cve.report/api/cve/CVE-2005-3730.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3730","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3730"},"summary":{"title":"CVE-2005-3730","description":"Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-11-21 11:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/15484","name":"http://www.securityfocus.com/bid/15484","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Revize CMS HTTPTranslatorServlet Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html","name":"http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"Lostmon´s Blogger: Revize(r) CMS SQL information disclosure and XSS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/20922","name":"http://www.osvdb.org/20922","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015231","name":"http://securitytracker.com/id?1015231","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"Revize CMS Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/17623","name":"http://secunia.com/advisories/17623","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Revize CMS Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3730","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3730","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3730","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"revize_cms","cpe5":"revize_cms","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:24:35.428Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html"},{"name":"17623","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17623"},{"name":"15484","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15484"},{"name":"20922","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/20922"},{"name":"1015231","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015231"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-11-21T11:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html"},{"name":"17623","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17623"},{"name":"15484","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15484"},{"name":"20922","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/20922"},{"name":"1015231","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015231"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3730","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html","refsource":"MISC","url":"http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html"},{"name":"17623","refsource":"SECUNIA","url":"http://secunia.com/advisories/17623"},{"name":"15484","refsource":"BID","url":"http://www.securityfocus.com/bid/15484"},{"name":"20922","refsource":"OSVDB","url":"http://www.osvdb.org/20922"},{"name":"1015231","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015231"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3730","datePublished":"2005-11-21T11:00:00.000Z","dateReserved":"2005-11-21T00:00:00.000Z","dateUpdated":"2024-09-16T18:39:21.552Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-11-21 11:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:revize_cms:revize_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"CF2B0692-D67D-4BCD-81FE-232885E4AD92"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3730","Ordinal":"1","Title":"CVE-2005-3730","CVE":"CVE-2005-3730","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3730","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.","Type":"Description","Title":"CVE-2005-3730"},{"CveYear":"2005","CveId":"3730","Ordinal":"2","NoteData":"2005-11-21","Type":"Other","Title":"Published"}]}}}