CVE-2005-2467

MySQL Eventum <= 1.5.5 - Cross-Site Scripting via id, release, or F Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2005-2467. PoCs published by GulfTech Security.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in MySQL Eventum, where user-supplied input is not properly sanitized. It includes an example URL demonstrating the XSS payload.

Description

Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

Exploits (3)

exploitdb WRITEUP VERIFIED
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/26056

The provided text describes a cross-site scripting (XSS) vulnerability in MySQL Eventum, where user-supplied input is not properly sanitized. It includes an example URL demonstrating the XSS payload.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: MySQL Eventum (version not specified)
No auth needed
Prerequisites: Access to a vulnerable MySQL Eventum instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/26057

The provided text describes a cross-site scripting (XSS) vulnerability in MySQL Eventum, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'release' parameter.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: MySQL Eventum (version not specified)
No auth needed
Prerequisites: Access to a vulnerable MySQL Eventum instance · Ability to craft a malicious URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/26058

The provided text describes a cross-site scripting (XSS) vulnerability in MySQL Eventum, where user-supplied input is not properly sanitized. It includes an example URL demonstrating the vulnerability but does not contain executable exploit code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: MySQL Eventum (version not specified)
No auth needed
Prerequisites: Access to a vulnerable MySQL Eventum instance · Ability to craft malicious URLs
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1287
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16304
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14436
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/18401
Exploit, Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014603
Patch x_refsource_confirm
http://lists.mysql.com/eventum-users/2072
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112292193807958&w=2
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/18400
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/18402

Scores

EPSS 0.0281
EPSS Percentile 84.7%

Details

Status published
Products (8)
mysql/eventum 1.1
mysql/eventum 1.2
mysql/eventum 1.2.2
mysql/eventum 1.3
mysql/eventum 1.3.1
mysql/eventum 1.4
mysql/eventum 1.5.4
mysql/eventum 1.5.5
Published Dec 31, 2005
Tracked Since Feb 18, 2026