Lucene search

[email protected]CVE-2006-1293

HistoryMar 19, 2006 - 11:02 p.m.

CVE-2006-1293

2006-03-1923:02:00

[email protected]

web.nvd.nist.gov

cve-2006-1293

cross-site scripting

xss

contrexx cms

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF).

Affected configurations

NVD

Node

astalavista_it_engineeringcontrexxRange≤1.0.8

astalavista_it_engineeringcontrexxMatch1.0.4

astalavista_it_engineeringcontrexxMatch1.0.5

astalavista_it_engineeringcontrexxMatch1.0.7

CPENameOperatorVersion
astalavista_it_engineering:contrexxastalavista it engineering contrexxle1.0.8
astalavista_it_engineering:contrexxastalavista it engineering contrexxeq1.0.4
astalavista_it_engineering:contrexxastalavista it engineering contrexxeq1.0.5
astalavista_it_engineering:contrexxastalavista it engineering contrexxeq1.0.7

CPE	Name	Operator	Version
astalavista_it_engineering:contrexx	astalavista it engineering contrexx	le	1.0.8
astalavista_it_engineering:contrexx	astalavista it engineering contrexx	eq	1.0.4
astalavista_it_engineering:contrexx	astalavista it engineering contrexx	eq	1.0.5
astalavista_it_engineering:contrexx	astalavista it engineering contrexx	eq	1.0.7

References

secunia.com/advisories/19294

securityreason.com/securityalert/599

soot.shabgard.org/Contrexx-CMS.txt

www.contrexx.com/?section=media1&act=download&path=/media/archive1/Opensource/Bugfixes/contrexx_1.0.8/&file=contrexx_v1.0.8_bugfix_27-02-06.zip

www.contrexx.com/?section=news&cmd=details&newsid=54

www.securityfocus.com/archive/1/428075/100/0/threaded

www.securityfocus.com/bid/17128

www.vupen.com/english/advisories/2006/1013

exchange.xforce.ibmcloud.com/vulnerabilities/25332

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Related for CVE-2006-1293

prion1 nvd1 cvelist1