Unscored CVE-2005-3821 EUVD-2005-3816GHSA-5rf3-f924-cp2x

Cross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via m…

Published Nov 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name.

References

20051125 SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM mailing-list
15569 vdb-entry
ADV-2005-2569 vdb-entry
1015274 vdb-entry
20051125 SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM mailing-list
21232 vdb-entry
17693 third-party-advisory