Lucene search

[email protected]CVE-2006-0193

HistoryJan 13, 2006 - 11:03 a.m.

CVE-2006-0193

2006-01-1311:03:00

[email protected]

web.nvd.nist.gov

cve-2006-0193

xss

hosting control panel

psoft.hsphere.cp

positive software h-sphere

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

JSON

Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action.

Affected configurations

NVD

Node

positive_softwareh-sphereMatch2.4.1

positive_softwareh-sphereMatch2.4.1_patch_1

positive_softwareh-sphereMatch2.4.1_patch_2

positive_softwareh-sphereMatch2.4.1_patch_3

positive_softwareh-sphereMatch2.4.1_patch_4

positive_softwareh-sphereMatch2.4.1_patch_5

positive_softwareh-sphereMatch2.4.1_patch_6

positive_softwareh-sphereMatch2.4.1_patch_7

positive_softwareh-sphereMatch2.4.2

positive_softwareh-sphereMatch2.4.2_beta_1

positive_softwareh-sphereMatch2.4.2_beta_2

positive_softwareh-sphereMatch2.4.2_beta_3

positive_softwareh-sphereMatch2.4.2_patch_1

positive_softwareh-sphereMatch2.4.2_patch_2

positive_softwareh-sphereMatch2.4.2_patch_3

positive_softwareh-sphereMatch2.4.2_patch_4

positive_softwareh-sphereMatch2.4.2_patch_5

positive_softwareh-sphereMatch2.4.2_rc1

positive_softwareh-sphereMatch2.4.2_rc2

positive_softwareh-sphereMatch2.4.3

positive_softwareh-sphereMatch2.4.3_beta_1

positive_softwareh-sphereMatch2.4.3_beta_2

positive_softwareh-sphereMatch2.4.3_patch_1

positive_softwareh-sphereMatch2.4.3_patch_2

positive_softwareh-sphereMatch2.4.3_patch_3

positive_softwareh-sphereMatch2.4.3_patch_4

positive_softwareh-sphereMatch2.4.3_patch_5

positive_softwareh-sphereMatch2.4.3_patch_6

positive_softwareh-sphereMatch2.4.3_patch_7

positive_softwareh-sphereMatch2.4.3_patch_8

positive_softwareh-sphereMatch2.4.3_rc1

positive_softwareh-sphereMatch2.4.3_rc2

CPENameOperatorVersion
positive_software:h-spherepositive software h-sphereeq2.4.1
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_1
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_2
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_3
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_4
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_5
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_6
positive_software:h-spherepositive software h-sphereeq2.4.1_patch_7
positive_software:h-spherepositive software h-sphereeq2.4.2
positive_software:h-spherepositive software h-sphereeq2.4.2_beta_1

CPE	Name	Operator	Version
positive_software:h-sphere	positive software h-sphere	eq	2.4.1
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_1
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_2
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_3
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_4
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_5
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_6
positive_software:h-sphere	positive software h-sphere	eq	2.4.1_patch_7
positive_software:h-sphere	positive software h-sphere	eq	2.4.2
positive_software:h-sphere	positive software h-sphere	eq	2.4.2_beta_1

Rows per page:

1-10 of 321

References

secunia.com/advisories/18447

www.osvdb.org/22372

www.psoft.net/HSdocumentation/versions/?v=all&p=r

www.psoft.net/HSdocumentation/versions/index.php?v=243p9&p=r

www.securityfocus.com/archive/1/421704/100/0/threaded

www.vupen.com/english/advisories/2006/0172

exchange.xforce.ibmcloud.com/vulnerabilities/24096

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

JSON

Related for CVE-2006-0193

cvelist1 nvd1 prion1