Published: 31/12/2005 Updated: 18/10/2016

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 595

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mysql eventum 1.5.4
mysql eventum 1.5.5
mysql eventum 1.2.2
mysql eventum 1.3
mysql eventum 1.1
mysql eventum 1.2
mysql eventum 1.3.1
mysql eventum 1.4

source: wwwsecurityfocuscom/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in ...

source: wwwsecurityfocuscom/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user i ...

source: wwwsecurityfocuscom/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in th ...

NVD-CWE-Other http://www.gulftech.org/?node=research&article_id=00093-07312005 http://lists.mysql.com/eventum-users/2072 http://www.securityfocus.com/bid/14436 http://www.osvdb.org/18400 http://www.osvdb.org/18401 http://www.osvdb.org/18402 http://securitytracker.com/id?1014603 http://secunia.com/advisories/16304 http://www.vupen.com/english/advisories/2005/1287 http://marc.info/?l=bugtraq&m=112292193807958&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/26057/

CVE-2005-2467

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect