GCVE - cpe:2.3:a:w.m.r._simpson:bookreview:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:w.m.r._simpson:bookreview:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	W.M.R. Simpson (`0554dcdb-36ce-5b0f-877f-3e6cf2aae173`)
Product	Bookreview (`fe70c26c-e7f4-59c3-b825-a817866f744f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-1782`	vulnerable	2026-06-08 04:48:27.503342	Details available Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_review.htm, (3) suggest_category.htm, (4) add_booklist.htm, or (5) add_url.htm, the isbn parameter to (6) add_review.htm, (7) add_contents.htm, (8) add_classification.htm, the (9) chapters parameter to the add_contents page in index.php (aka add_contents.htm), (10) the user parameter to contact.htm, or (11) the submit[string] parameter to search.htm. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE. Published: 2005-05-31T04:00:00.000Z Updated: 2024-08-07T21:59:24.461Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/13783 http://securitytracker.com/id?1014058 http://www.osvdb.org/16873 http://www.osvdb.org/16876 http://www.osvdb.org/16874	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.