PT-2005-2805 · Liberum · Liberum Help Desk

Dedi Dwianto · Published 2005-06-02 · Updated 2016-10-18 · CVE-2005-1838

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Liberum Help Desk version 0.97.3

Description The issue concerns multiple cross-site scripting vulnerabilities in the castnewPost.asp file. Remote attackers can inject arbitrary web script or HTML via the Email, Title, or Description fields.

Recommendations For Liberum Help Desk version 0.97.3, consider restricting input to the Email, Title, and Description fields to prevent arbitrary web script or HTML injection until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-1838

Affected Products

Liberum Help Desk

References · 3

• 🔥 http://echo.or.id/adv/adv14-theday-2005.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1838 · Security Note
• http://marc.info/?l=bugtraq&m=111773586701991&w=2 · Note