CVE-2005-4607: Incogen Bugport

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ids[0], (2) action, (3) report_id, (4) devWherePair[1][1], and (5) binds[0] parameters.

Affected products

• Incogen Bugport: version 1.039 only; version 1.040 only; version 1.041 only; version 1.042 only; version 1.043 only; version 1.044 only; …

Published 2005-12-31. Last modified 2026-06-16.