CVEvulnerability
CVE-2005-2467
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.
Affected configurations
• mysql eventum 1.1
• mysql eventum 1.2
• mysql eventum 1.2.2
• mysql eventum 1.3
• mysql eventum 1.3.1
• mysql eventum 1.4
• mysql eventum 1.5.4
• mysql eventum 1.5.5
References
- http://lists.mysql.com/eventum-users/2072 Patch
- http://marc.info/?l=bugtraq&m=112292193807958&w=2 marc.info
- http://secunia.com/advisories/16304 Patch, Vendor Advisory
- http://securitytracker.com/id?1014603 Exploit, Patch
- http://www.gulftech.org/?node=research&article_id=00093-07312005 Exploit
- http://www.osvdb.org/18400 Exploit
- http://www.osvdb.org/18401 Exploit
- http://www.osvdb.org/18402 Exploit
- http://www.securityfocus.com/bid/14436 Exploit
- http://www.vupen.com/english/advisories/2005/1287 www.vupen.com
- http://lists.mysql.com/eventum-users/2072 Patch
- http://marc.info/?l=bugtraq&m=112292193807958&w=2 marc.info
- http://secunia.com/advisories/16304 Patch, Vendor Advisory
- http://securitytracker.com/id?1014603 Exploit, Patch
- http://www.gulftech.org/?node=research&article_id=00093-07312005 Exploit
- http://www.osvdb.org/18400 Exploit
- http://www.osvdb.org/18401 Exploit
- http://www.osvdb.org/18402 Exploit
- http://www.securityfocus.com/bid/14436 Exploit
- http://www.vupen.com/english/advisories/2005/1287 www.vupen.com