CVE-2005-2467: XSS
First published: Sat Dec 31 2005(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MySQL Eventum | =1.4 | |
| MySQL Eventum | =1.2.2 | |
| MySQL Eventum | =1.1 | |
| MySQL Eventum | =1.3.1 | |
| MySQL Eventum | =1.5.5 | |
| MySQL Eventum | =1.3 | |
| MySQL Eventum | =1.2 | |
| MySQL Eventum | =1.5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.gulftech.org/?node=research&article_id=00093-07312005
- http://lists.mysql.com/eventum-users/2072
- http://www.securityfocus.com/bid/14436
- http://www.osvdb.org/18400
- http://www.osvdb.org/18401
- http://www.osvdb.org/18402
- http://securitytracker.com/id?1014603
- http://secunia.com/advisories/16304
- http://www.vupen.com/english/advisories/2005/1287
- http://marc.info/?l=bugtraq&m=112292193807958&w=2
Frequently Asked Questions
What is the severity of CVE-2005-2467?
CVE-2005-2467 is considered a moderate severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2005-2467?
To fix CVE-2005-2467, upgrade to the latest version of MySQL Eventum that has patched these XSS vulnerabilities.
Which versions of MySQL Eventum are affected by CVE-2005-2467?
CVE-2005-2467 affects MySQL Eventum versions 1.5.5 and earlier.
What are the affected components in CVE-2005-2467?
CVE-2005-2467 affects the view.php, list.php, and get_jsrs_data.php components of MySQL Eventum.
What type of attacks can be executed due to CVE-2005-2467?
Exploiting CVE-2005-2467 allows remote attackers to inject arbitrary web scripts or HTML into the application.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/mysql
- canonical/mysql eventum
- version/mysql eventum/1.4
- version/mysql eventum/1.2.2
- version/mysql eventum/1.1
- version/mysql eventum/1.3.1
- version/mysql eventum/1.5.5
- version/mysql eventum/1.3
- version/mysql eventum/1.2
- version/mysql eventum/1.5.4