Unrated severityNVD Advisory· Published Aug 7, 2005· Updated Jun 16, 2026

CVE-2005-2488

Description

Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Web Content Management/Web Content Management News System
cpe:2.3:a:web_content_management:web_content_management_news_system:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

securitytracker.com/idnvdExploit
www.rgod.altervista.org/webc.htmlnvdExploit
secunia.com/advisories/16317nvdVendor Advisory
www.securityfocus.com/bid/14464nvd
exchange.xforce.ibmcloud.com/vulnerabilities/21689nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000