← Vulnerability feed

Vulnerability record · CVE-2005-0319 · published 28 January 2005

CVE-2005-0319: Alt-n webadmin vulnerability

AAlt N · Webadmin

Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks.

4.3 CVSS 2.0 Medium EPSS 1.2% · top 34.0%
4.3CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=110692897003614&w=2
http://www.securityfocus.com/bid/12395 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19162
http://marc.info/?l=bugtraq&m=110692897003614&w=2
http://www.securityfocus.com/bid/12395 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19162

Track CVE-2005-0319 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-4370Alt-n webadmin vulnerabilityAlt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global …EPSS 1.8%7.5CVE-2003-0471WebAdmin WebAdmin.exe buffer overflow via long USER argumentWebAdmin.exe in Alt-N WebAdmin contains a buffer overflow reachable through an HTTP request to WebAdmin.dll with an overly long USER argument. A remo…EPSS 61%analysed4.6CVE-2006-4620Alt-n webadmin vulnerabilityThe useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain…EPSS 1.2%4.3CVE-2005-0317Alt-n webadmin vulnerabilityCross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HT…EPSS 1.2%4.0CVE-2006-4371Alt-n webadmin vulnerabilityMultiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authent…EPSS 2.7%3.5CVE-2003-1463Alt-n webadmin improper input validation vulnerabilityAbsolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1)…EPSS 2.0%2.1CVE-2005-0318Alt-n webadmin vulnerabilityuseredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users …EPSS 0.53%

Source: NIST National Vulnerability Database (record CVE-2005-0319), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.