Every CVE Search/ Get API key

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3...

5.0 Medium

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.

Exploit likelihood

1.10%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.

Record
CVE-2005-1838
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.

Record
CVE-2005-1838
Updated
2026-11-02
EUVDEUVD-2005-1840 No score

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.

Record
EUVD-2005-1840
Updated
2026-11-03
GitHub AdvisoriesGHSA-w3v7-56qw-625h No score

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3...

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.

Record
GHSA-w3v7-56qw-625h
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1838 is a medium vulnerability (CVSS 5.0) in Liberum Help Desk, published June 2, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.10%, the 65th percentile. No source names a fixed version.

References

MoveEnter Open