How severe is CVE-2005-1975?

CVE-2005-1975 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2005-1975 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (67th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-1975?

CVE-2005-1975 primarily affects Annuaire 1two. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2005-1975?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-1975 published?

CVE-2005-1975 was published on 2005-06-16 and last updated on 2026-06-16.

CVE-2005-1975

CVE-2005-1975 is a medium-severity vulnerability in Annuaire 1two with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 1% (67th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Annuaire 1two
Published: 2005-06-16
Last modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php.

Frequently asked questions

What is CVE-2005-1975?: Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php.
How severe is CVE-2005-1975?: CVE-2005-1975 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2005-1975 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (67th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-1975?: CVE-2005-1975 primarily affects Annuaire 1two. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2005-1975?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-1975 published?: CVE-2005-1975 was published on 2005-06-16 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:annuaire:1two:*:*:*:*:*:*:*:*
cpe:2.3:a:annuaire:1two:1.0:*:*:*:*:*:*:*

More vulnerabilities in Annuaire 1two

CVE-2006-4601 — High (CVSS 7.5): SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands…

All CVEs affecting Annuaire 1two →