CVE-2005-3894

Publication date 29 November 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) hex-encoded values in the QueueID parameter and (2) Action parameters.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
otrs 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected