Back to Database
Status published
Medium
CVE-2005-2327
Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2327
Credits & Attribution
No credits recorded in the NVD database.
More from e107
View All →CVE-2025-11941
e107 CMS Avatar image.php path traversal
Medium
5.3
CVE-2022-50916
e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override
High
8.7
CVE-2022-50907
e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE
High
8.6
CVE-2022-50906
e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS
Medium
4.8
CVE-2022-50905
e107 CMS v3.2.1 - Reflected XSS via Comment Flow
Medium
6.1
Affected Vendor
e107
View all reports →Affected Software
e107
Vulnerable Versions:
0.547_beta, 0.548_beta, 0.549_beta, 0.551_beta, 0.552_beta, 0.553_beta, 0.554_beta, 0.555_beta, 0.600, 0.601, 0.602, 0.603, 0.604, 0.605, 0.606, 0.607, 0.608, 0.609, 0.610, 0.611, 0.612, 0.613, 0.614, 0.615a, 0.616, 0.617, 5.1, 5.3_beta, 5.3_beta2, 5.04, 5.4_beta1, 5.4_beta3, 5.4_beta4, 5.4_beta5, 5.4_beta6, 5.05, 5.21
Timeline
Official Publish:
July 20th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.