5.8

CVE-2005-2467

Exploit

EPSS 2.39%
Published 31.12.2005 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

Affected products Warnungen 0 Metrics 2 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Mysql ≫ Eventum Version1.1

Mysql ≫ Eventum Version1.2

Mysql ≫ Eventum Version1.2.2

Mysql ≫ Eventum Version1.3

Mysql ≫ Eventum Version1.3.1

Mysql ≫ Eventum Version1.4

Mysql ≫ Eventum Version1.5.4

Mysql ≫ Eventum Version1.5.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.39%	0.844

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

http://lists.mysql.com/eventum-users/2072

Patch

http://marc.info/?l=bugtraq&m=112292193807958&w=2

http://secunia.com/advisories/16304

Patch

Vendor Advisory

http://securitytracker.com/id?1014603

Patch

Exploit

http://www.gulftech.org/?node=research&article_id=00093-07312005

Exploit

http://www.osvdb.org/18400

Exploit

http://www.osvdb.org/18401

Exploit

http://www.osvdb.org/18402

Exploit

http://www.securityfocus.com/bid/14436

Exploit

http://www.vupen.com/english/advisories/2005/1287

https://nvd.nist.gov/vuln/detail/CVE-2005-2467

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-2467

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-2467

EUVD