Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Apr 16, 2026

CVE-2005-4785

Description

Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.

Affected products

Jl Webworks/Quickblogger
cpe:2.3:a:jl_webworks:quickblogger:1.4:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.htmlnvdExploit
secunia.com/advisories/15942nvdVendor Advisory
exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txtnvd
securitytracker.com/idnvd
www.securityfocus.com/bid/14152nvd
www.vupen.com/english/advisories/2005/0987nvd
exchange.xforce.ibmcloud.com/vulnerabilities/21244nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000