Lucene search

K
cve[email protected]CVE-2006-1270
HistoryMar 19, 2006 - 2:02 a.m.

CVE-2006-1270

2006-03-1902:02:00
web.nvd.nist.gov
21
cve-2006-1270
xss
vulnerabilities
zones.php
inprotect 0.21
web security
remote attack

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected configurations

NVD
Node
inprotectinprotectRange0.21
CPENameOperatorVersion
inprotect:inprotectinprotectle0.21

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

Related for CVE-2006-1270