JVN/CVE Demo: Cveinfos

CVE

Id: 15022
CVE No.: CVE-2005-3818
Status: Candidate
Description: Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) various input fields, including the contact, lead, and first or last name fields, (2) the record parameter in a DetailView action in the Leads module for index.php, (3) the $_SERVER["PHP_SELF"] variable, which is used in multiple locations such as index.php, and (4) aggregated RSS feeds in the RSS aggregation module.
Phase: Assigned (20051126)
Votes: None (candidate not yet proposed)
Comments

Actions

Related CVE References

Id	CVE Id	CVE No.	Reference	Actions
116662	15022	CVE-2005-3818	BUGTRAQ:20051124 Advisory 23/2005: vTiger multiple vulnerabilities	View
116663	15022	CVE-2005-3818	URL:http://www.securityfocus.com/archive/1/archive/1/417730/30/0/threaded	View
116664	15022	CVE-2005-3818	MISC:http://www.hardened-php.net/advisory_232005.105.html	View
116665	15022	CVE-2005-3818	BID:15562	View
116666	15022	CVE-2005-3818	URL:http://www.securityfocus.com/bid/15562	View
116667	15022	CVE-2005-3818	VUPEN:ADV-2005-2569	View
116668	15022	CVE-2005-3818	URL:http://www.vupen.com/english/advisories/2005/2569	View
116669	15022	CVE-2005-3818	OSVDB:21227	View
116670	15022	CVE-2005-3818	URL:http://www.osvdb.org/21227	View
116671	15022	CVE-2005-3818	OSVDB:21228	View
116672	15022	CVE-2005-3818	URL:http://www.osvdb.org/21228	View
116673	15022	CVE-2005-3818	OSVDB:21229	View
116674	15022	CVE-2005-3818	URL:http://www.osvdb.org/21229	View
116675	15022	CVE-2005-3818	OSVDB:21230	View
116676	15022	CVE-2005-3818	URL:http://www.osvdb.org/21230	View
116677	15022	CVE-2005-3818	SECTRACK:1015271	View
116678	15022	CVE-2005-3818	URL:http://securitytracker.com/id?1015271	View
116679	15022	CVE-2005-3818	SECUNIA:17693	View
116680	15022	CVE-2005-3818	URL:http://secunia.com/advisories/17693	View
116681	15022	CVE-2005-3818	XF:vtiger-multiple-fields-xss(23362)	View
116682	15022	CVE-2005-3818	URL:http://xforce.iss.net/xforce/xfdb/23362	View
116683	15022	CVE-2005-3818	XF:vtiger-rss-xss(23363)	View

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.29 MB
View render complete	2.72 MB

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.80
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	407.33
Event: Controller.beforeRender	4.70
» Processing toolbar data	4.60
Rendering View	8.06
» Event: View.beforeRender	0.02
» Rendering APP/View/Cveinfos/view.ctp	7.09
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.51
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.09
Event: View.afterLayout	0.00

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/cveinfos/view/15022
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/cveinfos/view/15022
Remote Port	40883
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.1
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.145.128
Http Via	1.1 squid-proxy-5b5d847c96-56z77 (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.1
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.1
Unique Id	aO2FvaX1IH4-pgd8XCIJYgAAASk
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.1
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.1
Redirect Unique Id	aO2FvaX1IH4-pgd8XCIJYgAAASk
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.1
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.1
Redirect Redirect Unique Id	aO2FvaX1IH4-pgd8XCIJYgAAASk
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1760396733.8085
Request Time	1760396733

CVE

Actions

Related CVE References

Related JVN

Request History

Session

Request

Cake Params

Post data

Query string

Cookie

Current Route

Sql Logs

default

Memory

Timers

Logs

View Variables

App Constants

CakePHP Constants

PHP Environment

Included Files

Include Paths

Included Files