CVE-2005-4161

** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect...

4.3 MediumPublic exploitDisputed

Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors. NOTE: the vendor has disputed this issue, stating "No invalid input can reach the script.

Exploit likelihood

1.83%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2005-4161
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-4161
Updated: 2026-11-02

EUVDEUVD-2005-4156 No score

Record: EUVD-2005-4156
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mpp8-3fhh-c8rg No score

** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect...

** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors. NOTE: the vendor has disputed this issue, stating "No invalid input can reach the script."

Record: GHSA-mpp8-3fhh-c8rg
Weakness: CWE-79
Updated: 2026-11-02

Affected products

milliscripts

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	MilliScripts 1.4 - 'register.php' Cross-Site Scripting	2005-12-08

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4161 is a medium vulnerability (CVSS 4.3) in Milliscripts, published December 11, 2005. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile.