CVE-2005-4256 describes a Cross-Site Scripting (XSS) vulnerability in the forum.asp component of ASP-DEV XM Forum RC3, allowing remote attackers to inject arbitrary web script or HTML via the forum_title parameter. This vulnerability has a CVSS score of 4.3 (Medium severity), indicating it can be exploited over the network with medium access complexity to achieve partial integrity impact. While there is no evidence of active exploitation, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal. The accuracy of the vulnerability details is questioned, as the specified parameter does not appear in the source code, potentially linking it to CVE-2004-2211.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
rc3CPE matchmatch criteria | cpe:2.3:a:asp-dev:xm_forum:rc3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.