{"id":"CVE-2005-1582","aliases":["EUVD-2005-1585","GHSA-g767-2hg2-m92r"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers...","description":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0101,"percentile":0.63347,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-05-14T04:00:00Z","modified":"2026-06-16T22:13:19Z","products":[{"vendor":"1two","product":"1two_news"}],"references":[{"url":"http://securitytracker.com/id?1013960","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1582"},{"url":"https://github.com/advisories/GHSA-g767-2hg2-m92r"}],"sources":{"cve":[{"id":"CVE-2005-1582","description":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.","status":"published","published":"2005-05-14T04:00:00Z","modified":"2024-09-17T01:26:00.151Z","updated_at":"2026-11-02T14:33:39.916766Z"}],"euvd":[{"id":"EUVD-2005-1585","description":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.","status":"published","published":"2005-05-14T04:00:00Z","modified":"2024-09-17T01:26:00Z","updated_at":"2026-11-03T00:28:49.824577Z"}],"ghsa":[{"id":"GHSA-g767-2hg2-m92r","title":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers...","description":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.","status":"published","published":"2022-05-01T02:00:03Z","modified":"2023-01-30T05:07:30Z","updated_at":"2026-11-02T14:47:42.19083Z"}],"nvd":[{"id":"CVE-2005-1582","description":"Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables.","status":"published","published":"2005-05-14T04:00:00Z","modified":"2026-06-16T22:13:19.167Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.266741Z"}]}}