{"api_version":"1","generated_at":"2026-07-23T06:34:45+00:00","cve":"CVE-2005-4597","urls":{"html":"https://cve.report/CVE-2005-4597","api":"https://cve.report/api/cve/CVE-2005-4597.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-4597","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-4597"},"summary":{"title":"CVE-2005-4597","description":"Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/16092","name":"http://www.securityfocus.com/bid/16092","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"iPei Guestbook Index.PHP Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23914","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23914","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html","name":"http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"- UNSECURED SYSTEMS -: iPei Guestbook XSS vuln.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18241","name":"http://secunia.com/advisories/18241","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"iPei Guestbook Script Insertion Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/22118","name":"http://www.osvdb.org/22118","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-4597","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-4597","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"4597","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"epistream","cpe5":"ipei_guestbook","cpe6":"1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:53:27.801Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html"},{"name":"18241","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18241"},{"name":"16092","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16092"},{"name":"22118","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/22118"},{"name":"ipeiguestbook-index-xss(23914)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23914"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-12-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html"},{"name":"18241","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18241"},{"name":"16092","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16092"},{"name":"22118","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/22118"},{"name":"ipeiguestbook-index-xss(23914)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23914"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-4597","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html","refsource":"MISC","url":"http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html"},{"name":"18241","refsource":"SECUNIA","url":"http://secunia.com/advisories/18241"},{"name":"16092","refsource":"BID","url":"http://www.securityfocus.com/bid/16092"},{"name":"22118","refsource":"OSVDB","url":"http://www.osvdb.org/22118"},{"name":"ipeiguestbook-index-xss(23914)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23914"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-4597","datePublished":"2006-01-01T23:00:00.000Z","dateReserved":"2006-01-01T00:00:00.000Z","dateUpdated":"2024-08-07T23:53:27.801Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epistream:ipei_guestbook:1.7:*:*:*:*:*:*:*","matchCriteriaId":"57157158-7086-468F-81A3-584CE9DCD62C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"4597","Ordinal":"1","Title":"CVE-2005-4597","CVE":"CVE-2005-4597","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"4597","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook.","Type":"Description","Title":"CVE-2005-4597"},{"CveYear":"2005","CveId":"4597","Ordinal":"2","NoteData":"2006-01-01","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"4597","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}