MEDIUM
Note: the vendor has disputed this issue
Published Aug 23, 2005
4.3
MEDIUMCVSS 2.0
EPSS 1.77%
Description
Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.
Affected products
No data.
- 800
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (5)
- http://marc.info/?l=bugtraq&m=112456235729717&w=2 mailing-listx_refsource_BUGTRAQ
- http://securitytracker.com/id?1014747 vdb-entryx_refsource_SECTRACKExploit
- http://www.neocrome.net x_refsource_MISC
- http://www.securityfocus.com/bid/14619 vdb-entryx_refsource_BIDExploit
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2675 Advisory
| Link | Providers | Tags |
|---|---|---|
| http://marc.info/?l=bugtraq&m=112456235729717&w=2 | mailing-listx_refsource_BUGTRAQ | |
| http://securitytracker.com/id?1014747 | vdb-entryx_refsource_SECTRACKExploit | |
| http://www.neocrome.net | x_refsource_MISC | |
| http://www.securityfocus.com/bid/14619 | vdb-entryx_refsource_BIDExploit | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2675 | Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 23, 2005
Updated Aug 7, 2024
Reserved Aug 23, 2005
Link CVE-2005-2674
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2005-2675 Assigner mitre
Published Aug 23, 2005
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2005-2675