CVEvulnerability
CVE-2005-2884
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.
Affected configurations
• neocrome land down under 601
• neocrome land down under 602
• neocrome land down under 700.01
• neocrome land down under 700.02
• neocrome land down under 700.03
• neocrome land down under 700.04
• neocrome land down under 700.05
• neocrome land down under 701
• neocrome land down under 800
• neocrome land down under 801
References
- http://marc.info/?l=bugtraq&m=112604873103252&w=2 marc.info
- http://secunia.com/advisories/16710/ Vendor Advisory
- http://www.securityfocus.com/bid/14746 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22195 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=112604873103252&w=2 marc.info
- http://secunia.com/advisories/16710/ Vendor Advisory
- http://www.securityfocus.com/bid/14746 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22195 exchange.xforce.ibmcloud.com