Lucene search

[email protected]CVE-2006-1223

HistoryMar 14, 2006 - 11:02 a.m.

CVE-2006-1223

2006-03-1411:02:00

[email protected]

web.nvd.nist.gov

jupiter content manager

xss

vulnerability

remote attackers

web script

html

javascript uri

image bbcode tag

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.6%

JSON

Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.

Affected configurations

NVD

Node

jupiter_cmsjupiter_cmsRange≤1.1.5

jupiter_cmsjupiter_cmsMatch1.1.4

CPENameOperatorVersion
jupiter_cms:jupiter_cmsjupiter cmsle1.1.5
jupiter_cms:jupiter_cmsjupiter cmseq1.1.4

CPE	Name	Operator	Version
jupiter_cms:jupiter_cms	jupiter cms	le	1.1.5
jupiter_cms:jupiter_cms	jupiter cms	eq	1.1.4

References

secunia.com/advisories/19215

securityreason.com/securityalert/572

www.jupiterportal.com/index.php?n=modules/forum&a=3&d=11&o=5&q=313

www.osvdb.org/23839

www.securityfocus.com/archive/1/427406/100/0/threaded

www.securityfocus.com/archive/1/430903/100/0/threaded

www.securityfocus.com/bid/17072

www.vupen.com/english/advisories/2006/0942

exchange.xforce.ibmcloud.com/vulnerabilities/25241

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.6%

JSON

Related for CVE-2006-1223

nvd1 prion1 cvelist1