Lucene search
HistoryMar 28, 2006 - 11:06 a.m.
CVE-2006-1405
cve-2006-1405
xss
remote attackers
web script
html
search.aspx
sscms 2.1.0
security vulnerability
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.1%
Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Affected configurations
Node
sheer_vision_technologiessscmsRange≤2.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| sheer_vision_technologies:sscms | sheer vision technologies sscms | le | 2.1.0 |
Related
prion
prion
Cross site scripting
2006-03-28 11:06:00
nvd
nvd
CVE-2006-1405
2006-03-28 11:06:00
cvelist
cvelist
CVE-2006-1405
2006-03-28 11:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.1%
Related for CVE-2006-1405