Lucene search

[email protected]CVE-2006-0593

HistoryFeb 08, 2006 - 1:02 a.m.

CVE-2006-0593

2006-02-0801:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2006

0593

cross-site scripting

xss

php-fusion

shoutbox_panel.php

comments_include.php

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.

CPENameOperatorVersion
php_fusion:php_fusionphp fusioneq6.00.105
php_fusion:php_fusionphp fusioneq6.00.106
php_fusion:php_fusionphp fusioneq6.00.103
php_fusion:php_fusionphp fusioneq6.00.101
php_fusion:php_fusionphp fusioneq6.00.107
php_fusion:php_fusionphp fusioneq6.00.303
php_fusion:php_fusionphp fusioneq6.00.104
php_fusion:php_fusionphp fusioneq6.00.100
php_fusion:php_fusionphp fusioneq6.00.108
php_fusion:php_fusionphp fusioneq6.00.207

CPE	Name	Operator	Version
php_fusion:php_fusion	php fusion	eq	6.00.105
php_fusion:php_fusion	php fusion	eq	6.00.106
php_fusion:php_fusion	php fusion	eq	6.00.103
php_fusion:php_fusion	php fusion	eq	6.00.101
php_fusion:php_fusion	php fusion	eq	6.00.107
php_fusion:php_fusion	php fusion	eq	6.00.303
php_fusion:php_fusion	php fusion	eq	6.00.104
php_fusion:php_fusion	php fusion	eq	6.00.100
php_fusion:php_fusion	php fusion	eq	6.00.108
php_fusion:php_fusion	php fusion	eq	6.00.207

Rows per page:

1-10 of 181

References

secunia.com/advisories/18949

www.osvdb.org/22980

www.osvdb.org/22981

www.php-fusion.co.uk/downloads.php?cat_id=3

www.php-fusion.co.uk/news.php?readmore=307

www.securityfocus.com/bid/16548

www.vupen.com/english/advisories/2006/0463

exchange.xforce.ibmcloud.com/vulnerabilities/24548

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2006-0593

prion1