Lucene search

K
cve[email protected]CVE-2006-1405
HistoryMar 28, 2006 - 11:06 a.m.

CVE-2006-1405

2006-03-2811:06:00
web.nvd.nist.gov
29
cve-2006-1405
xss
remote attackers
web script
html
search.aspx
sscms 2.1.0
security vulnerability

5.7 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

74.1%

Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

Affected configurations

NVD
Node
sheer_vision_technologiessscmsRange2.1.0

5.7 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

74.1%

Related for CVE-2006-1405