VULNERABILITY INTELLIGENCE
CVE-2005-1672
CVSS score4.3 MEDIUM
EPSS probability2.71%
CISA KEVNot currently listed
Published2005-05-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the (1) find parameter to index.php, (2) name or (3) message field of a chat request, or (4) the message body when opening a trouble ticket.
Primary references
- cve@mitre.org
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory