NVD

Id
69532  
Name
CVE-2005-3894  
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) hex-encoded values in the QueueID parameter and (2) Action parameters.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-11-29  
Modified Date
2016-10-17  
Seq
2005-3894  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359451 69532 CVE-2005-3894 20051122 OTRS 1.x/2.x Multiple Security Issues  View
359452 69532 CVE-2005-3894 20051122 OTRS 1.x/2.x Multiple Security Issues  View
359453 69532 CVE-2005-3894 http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt  View
359454 69532 CVE-2005-3894 http://otrs.org/advisory/OSA-2005-01-en/  View
359455 69532 CVE-2005-3894 1015262  View
359456 69532 CVE-2005-3894 DSA-973  View
359457 69532 CVE-2005-3894 SUSE-SR:2005:030  View
359458 69532 CVE-2005-3894 15537  View
359459 69532 CVE-2005-3894 ADV-2005-2535  View
359460 69532 CVE-2005-3894 otrs-queue-selection-xss(23356)  View
359461 69532 CVE-2005-3894 otrs-index-xss(23359)  View

Related JVN