CVE-2005-2380

{"id": "CVE-2005-2380", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-07-26T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=112188282401681&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/16123", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) start, and (3) id parameters to browse.php, or the sid parameter to (4) dataentry.php or (5) export.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados en PHP Surveyor 0.98 permite que atacantes remotos inyecten script web arbitrario o HTML mediante los par\u00e1metros 1) sid, 2) start y 3) ID en \"browse.php\", o bien el par\u00e1metro \"sid\" en 4) \"dataentry.php\" o 5) \"export.php\"."}], "lastModified": "2016-10-18T03:26:34.653", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:php_surveyor:php_surveyor:0.98:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78E91066-133F-4946-B355-A951753A3D3F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}