AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2005-2254

MEDIUM · CVSS 4.3 EPSS 0.99%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-07-13 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It may be remotely exploitable.

CVE
CVE-2005-2254
Severity
MEDIUM
CVSS
4.3
EPSS
0.99%

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) admin/index.php, or (3) the auction_id parameter to profile.php. NOTE: there is evidence that viewnews.php and login.php may not be part of the PhpAuction product, so they are not included in this description.