CVE-2005-2467

Description

Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2468

http://www.vupen.com/english/advisories/2005/1287

http://www.securityfocus.com/bid/14436

http://www.osvdb.org/18402

http://www.osvdb.org/18401

http://www.osvdb.org/18400

http://www.gulftech.org/?node=research&article_id=00093-07312005

http://securitytracker.com/id?1014603

http://secunia.com/advisories/16304

http://marc.info/?l=bugtraq&m=112292193807958&w=2

http://lists.mysql.com/eventum-users/2072

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS