Lucene search
HistoryJul 26, 2005 - 4:00 a.m.
CVE-2005-2380
php surveyor
0.98
cross-site scripting
vulnerabilities
remote attackers
web script
html
sid
start
id
parameters
browse.php
dataentry.php
export.php
cve-2005-2380
nvd
6.2 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.8%
Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) start, and (3) id parameters to browse.php, or the sid parameter to (4) dataentry.php or (5) export.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_surveyor:php_surveyor | php surveyor | eq | 0.98 |
Related
nessus
nessus
PHP Surveyor Multiple Vulnerabilities
2005-08-24 00:00:00
openvas
openvas
Multiple vulnerabilities in PHP Surveyor
2006-03-26 00:00:00
6.2 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.8%
Related for CVE-2005-2380