CVE-2005-2467: XSS
Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to getjsrsdata.php.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2467?
CVE-2005-2467 is considered a moderate severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2005-2467?
To fix CVE-2005-2467, upgrade to the latest version of MySQL Eventum that has patched these XSS vulnerabilities.
Which versions of MySQL Eventum are affected by CVE-2005-2467?
CVE-2005-2467 affects MySQL Eventum versions 1.5.5 and earlier.
What are the affected components in CVE-2005-2467?
CVE-2005-2467 affects the view.php, list.php, and get_jsrs_data.php components of MySQL Eventum.
What type of attacks can be executed due to CVE-2005-2467?
Exploiting CVE-2005-2467 allows remote attackers to inject arbitrary web scripts or HTML into the application.