Lucene search

MitreCVE-2006-0703

HistoryFeb 15, 2006 - 11:06 a.m.

CVE-2006-0703

2006-02-1511:06:00

mitre

web.nvd.nist.gov

cve-2006-0703

imagevue

xss

cross-site scripting

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

73.7%

JSON

Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter.

Affected configurations

Nvd

Node

imagevueimagevueMatch0.16.1

VendorProductVersionCPE
imagevueimagevue0.16.1cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
imagevue	imagevue	0.16.1	cpe:2.3:a:imagevue:imagevue:0.16.1:::::::*

References

secunia.com/advisories/18802

securityreason.com/securityalert/429

www.securityfocus.com/archive/1/424745/30/0/threaded

www.securityfocus.com/archive/1/440586/100/100/threaded

www.securityfocus.com/archive/1/450047/100/100/threaded

www.securityfocus.com/bid/16594

www.vupen.com/english/advisories/2006/0570

exchange.xforce.ibmcloud.com/vulnerabilities/24642

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

73.7%

JSON

Related for CVE-2006-0703