{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-24T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://retrogod.altervista.org/JAWS_062_sql.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847"}, {"name": "jaws-magpieslashbox-xss(27337)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27337"}, {"name": "20842", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20842"}, {"name": "20150508 Feed2JS v1.7 XSS (Cross-site Scripting) Web Security Vulnerabilities", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2015/May/35"}, {"name": "17741", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17741"}, {"name": "1015264", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015264"}, {"tags": ["x_refsource_MISC"], "url": "http://www.jaws-project.com/index.php?blog/show/29"}, {"name": "21113", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21113"}, {"name": "15555", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15555"}, {"name": "20060626 Jaws <= 0.6.2 'Search gadget' SQL injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/438434/100/0/threaded"}, {"name": "21112", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21112"}, {"name": "ADV-2006-2546", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2546"}, {"name": "21643", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21643"}, {"name": "18665", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18665"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3955", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://retrogod.altervista.org/JAWS_062_sql.html", "refsource": "MISC", "url": "http://retrogod.altervista.org/JAWS_062_sql.html"}, {"name": "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847", "refsource": "CONFIRM", "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847"}, {"name": "jaws-magpieslashbox-xss(27337)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27337"}, {"name": "20842", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20842"}, {"name": "20150508 Feed2JS v1.7 XSS (Cross-site Scripting) Web Security Vulnerabilities", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2015/May/35"}, {"name": "17741", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17741"}, {"name": "1015264", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015264"}, {"name": "http://www.jaws-project.com/index.php?blog/show/29", "refsource": "MISC", "url": "http://www.jaws-project.com/index.php?blog/show/29"}, {"name": "21113", "refsource": "OSVDB", "url": "http://www.osvdb.org/21113"}, {"name": "15555", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15555"}, {"name": "20060626 Jaws <= 0.6.2 'Search gadget' SQL injection", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/438434/100/0/threaded"}, {"name": "21112", "refsource": "OSVDB", "url": "http://www.osvdb.org/21112"}, {"name": "ADV-2006-2546", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2546"}, {"name": "21643", "refsource": "OSVDB", "url": "http://www.osvdb.org/21643"}, {"name": "18665", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18665"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3955", "datePublished": "2005-12-01T11:00:00", "dateReserved": "2005-12-01T00:00:00", "dateUpdated": "2018-10-19T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:blogbuddies:blogbuddies:0.3:*:*:*:*:*:*:*", "matchCriteriaId": "3173AFBD-9259-4CF7-9812-C085C0D7F27F", "vulnerable": true}, {"criteria": "cpe:2.3:a:jaws:jaws:0.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "6C6D4750-A567-47D2-A250-574A4FF558DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:magpierss:magpierss:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "5B45ACA6-FB65-435B-A3EB-4948268125D0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php."}], "id": "CVE-2005-3955", "lastModified": "2018-10-19T15:39:36.890", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-12-01T06:03:00.000", "references": [{"source": "cve@mitre.org", "url": "http://retrogod.altervista.org/JAWS_062_sql.html"}, {"source": "cve@mitre.org", "url": "http://seclists.org/fulldisclosure/2015/May/35"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17741"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20842"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015264"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847"}, {"source": "cve@mitre.org", "url": "http://www.jaws-project.com/index.php?blog/show/29"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21112"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21113"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21643"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/438434/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/15555"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18665"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2546"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27337"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}