CVE-2005-2610

Published: Aug 17, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected (2)

Products: Vegadns: Vegadns

Vegadns

1 product

Vegadns

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Vegadns Vegadns	Version 0.8.1
Vegadns Vegadns	Version 0.9.8

References (8)

http://secunia.com/advisories/16370

Source: cve@mitre.org

Vendor Advisory

http://vegadns.org/src/current/CHANGELOG

Source: cve@mitre.org

http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/14538

Source: cve@mitre.org

http://secunia.com/advisories/16370

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://vegadns.org/src/current/CHANGELOG

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/14538

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.