Lucene search

[email protected]CVE-2006-0101

HistoryJan 06, 2006 - 11:03 a.m.

CVE-2006-0101

2006-01-0611:03:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2006-0101

cross-site scripting

xss

sblog

web security

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p and (2) keyword parameters in (a) index.php and (b) search.php.

CPENameOperatorVersion
sblog:sblogsblogle0.7.1_build2005-12-02_beta

CPE	Name	Operator	Version
sblog:sblog	sblog	le	0.7.1_build2005-12-02_beta

References

osvdb.org/ref/22/22373-sblog.txt

www.osvdb.org/22373

www.osvdb.org/22374

www.vupen.com/english/advisories/2006/0041

exchange.xforce.ibmcloud.com/vulnerabilities/23979

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON

Related for CVE-2006-0101

prion1