Lucene search

[email protected]CVE-2005-1145

HistoryApr 12, 2005 - 4:00 a.m.

CVE-2005-1145

2005-04-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

xss

cross-site scripting

calendarscript

vulnerability

remote attackers

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.4%

JSON

NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarScript 3.20 allows remote attackers to inject arbitrary web script or HTML via the template parameter, a different vulnerability than CVE-2005-1146

CPENameOperatorVersion
calendarscript:calendarscriptcalendarscripteq3.20

CPE	Name	Operator	Version
calendarscript:calendarscript	calendarscript	eq	3.20

References

securitytracker.com/id?1013705

www.osvdb.org/15547

www.snkenjoi.com/secadv/secadv3.txt

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.4%

JSON

Related for CVE-2005-1145

cve1