Unrated severityNVD Advisory· Published Oct 27, 2005· Updated Apr 16, 2026
CVE-2005-3334
CVE-2005-3334
Description
Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters.
Affected products
3Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- lostmon.blogspot.com/2005/10/flyspray-bug-killer-multiple-variable.htmlnvdExploitVendor Advisory
- flyspray.rocks.cc/bts/task/703nvd
- secunia.com/advisories/17316nvd
- secunia.com/advisories/18606nvd
- www.debian.org/security/2006/dsa-953nvd
- www.osvdb.org/20326nvd
- www.securityfocus.com/bid/15209nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/22889nvd
News mentions
0No linked articles in our index yet.