Lucene search
MitreCVE-2005-2884HistorySep 14, 2005 - 8:03 p.m.
CVE-2005-2884
2005-09-1420:03:00
mitre
web.nvd.nist.gov
29
cve-2005-2884
cross-site scripting
xss
ldu 801
events.php
web script injection
html injection
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.004
Percentile
72.4%
Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.
Affected configurations
Node
neocromeland_down_underMatch601
ORneocromeland_down_underMatch602
ORneocromeland_down_underMatch700.01
ORneocromeland_down_underMatch700.02
ORneocromeland_down_underMatch700.03
ORneocromeland_down_underMatch700.04
ORneocromeland_down_underMatch700.05
ORneocromeland_down_underMatch701
ORneocromeland_down_underMatch800
ORneocromeland_down_underMatch801
| Vendor | Product | Version | CPE |
|---|---|---|---|
| neocrome | land_down_under | 601 | cpe:2.3:a:neocrome:land_down_under:601:*:*:*:*:*:*:* |
| neocrome | land_down_under | 602 | cpe:2.3:a:neocrome:land_down_under:602:*:*:*:*:*:*:* |
| neocrome | land_down_under | 700.01 | cpe:2.3:a:neocrome:land_down_under:700.01:*:*:*:*:*:*:* |
| neocrome | land_down_under | 700.02 | cpe:2.3:a:neocrome:land_down_under:700.02:*:*:*:*:*:*:* |
| neocrome | land_down_under | 700.03 | cpe:2.3:a:neocrome:land_down_under:700.03:*:*:*:*:*:*:* |
| neocrome | land_down_under | 700.04 | cpe:2.3:a:neocrome:land_down_under:700.04:*:*:*:*:*:*:* |
| neocrome | land_down_under | 700.05 | cpe:2.3:a:neocrome:land_down_under:700.05:*:*:*:*:*:*:* |
| neocrome | land_down_under | 701 | cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:* |
| neocrome | land_down_under | 800 | cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:* |
| neocrome | land_down_under | 801 | cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2005-2884
2005-09-14 04:00:00
nvd
nvd
CVE-2005-2884
2005-09-14 20:03:00
openvas
openvas
Land Down Under <= 801 Multiple Vulnerabilities
2006-03-26 00:00:00
Land Down Under <= 801 Multiple Vulnerabilities
2006-03-26 00:00:00
nessus
nessus
Land Down Under <= 801 Multiple Vulnerabilities
2005-09-09 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.004
Percentile
72.4%
Related for CVE-2005-2884