Unrated severityNVD Advisory· Published Mar 31, 2009· Updated Jun 16, 2026

CVE-2005-4879

Description

Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) gmt_ofs and (2) language parameters. NOTE: the page parameter is already covered by CVE-2006-1913. NOTE: it was later reported that 3.50 is also affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jax Scripts/Jax Guestbook2 versions
cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:jax_scripts:jax_guestbook:3.31:*:*:*:*:*:*:*
Jax Guestbook/jax_guestbook.phpllm-create
Range: 3.1, 3.31, 3.50

Patches

Vulnerability mechanics

References

lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.htmlnvdExploit
secunia.com/advisories/16337nvdVendor Advisory
downloads.securityfocus.com/vulnerabilities/exploits/28523.htmlnvd
www.securityfocus.com/bid/28523nvd
exchange.xforce.ibmcloud.com/vulnerabilities/43562nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000