Lucene search

[email protected]CVE-2006-1399

HistoryMar 28, 2006 - 11:06 a.m.

CVE-2006-1399

2006-03-2811:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-1399

cross-site scripting

xss

searchresult.php

meeting reserve 1.0 beta

remote attackers

web script

html

search_term parameter

nvd

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%

JSON

Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

CPENameOperatorVersion
php_lite:meeting_reservephp lite meeting reserveeq1.0_beta

CPE	Name	Operator	Version
php_lite:meeting_reserve	php lite meeting reserve	eq	1.0_beta

References

secunia.com/advisories/19372

www.osvdb.org/24162

www.securityfocus.com/bid/17256

www.vupen.com/english/advisories/2006/1110

exchange.xforce.ibmcloud.com/vulnerabilities/25432

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.7%

JSON

Related for CVE-2006-1399

prion1