Lucene search

[email protected]CVE-2006-0927

HistoryFeb 28, 2006 - 11:02 a.m.

CVE-2006-0927

2006-02-2811:02:00

[email protected]

web.nvd.nist.gov

cve-2006-0927

cross-site scripting

xss

jgs-xa jgs-gallery addon

woltlab burning board

remote attackers

web script

html

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php, and the (2) katid parameter in © jgs_galerie_slideshow.php.

Affected configurations

NVD

Node

jgs-xajgs-gallery_addonMatch4.0

woltlabburning_boardMatch2.0

woltlabburning_boardMatch2.0.3

woltlabburning_boardMatch2.1.5

woltlabburning_boardMatch2.2.1

woltlabburning_boardMatch2.2.2

woltlabburning_boardMatch2.2.3

woltlabburning_boardMatch2.3.0

woltlabburning_boardMatch2.3.1

CPENameOperatorVersion
jgs-xa:jgs-gallery_addonjgs-xa jgs-gallery addoneq4.0
woltlab:burning_boardwoltlab burning boardeq2.0
woltlab:burning_boardwoltlab burning boardeq2.0.3
woltlab:burning_boardwoltlab burning boardeq2.1.5
woltlab:burning_boardwoltlab burning boardeq2.2.1
woltlab:burning_boardwoltlab burning boardeq2.2.2
woltlab:burning_boardwoltlab burning boardeq2.2.3
woltlab:burning_boardwoltlab burning boardeq2.3.0
woltlab:burning_boardwoltlab burning boardeq2.3.1

CPE	Name	Operator	Version
jgs-xa:jgs-gallery_addon	jgs-xa jgs-gallery addon	eq	4.0
woltlab:burning_board	woltlab burning board	eq	2.0
woltlab:burning_board	woltlab burning board	eq	2.0.3
woltlab:burning_board	woltlab burning board	eq	2.1.5
woltlab:burning_board	woltlab burning board	eq	2.2.1
woltlab:burning_board	woltlab burning board	eq	2.2.2
woltlab:burning_board	woltlab burning board	eq	2.2.3
woltlab:burning_board	woltlab burning board	eq	2.3.0
woltlab:burning_board	woltlab burning board	eq	2.3.1

References

archives.neohapsis.com/archives/fulldisclosure/2006-02/0615.html

www.nukedx.com/?viewdoc=11

www.securityfocus.com/archive/1/425981/100/0/threaded

www.securityfocus.com/bid/16810

www.securityfocus.com/bid/16843

exchange.xforce.ibmcloud.com/vulnerabilities/24888

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

Related for CVE-2006-0927

prion1 cvelist1 nvd1