Lucene search
HistoryMar 28, 2006 - 11:06 a.m.
CVE-2006-1405
cve-2006-1405
xss
remote attackers
web script
html
search.aspx
sscms 2.1.0
security vulnerability
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.004
Percentile
74.1%
Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Affected configurations
Node
sheer_vision_technologiessscmsRange≤2.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sheer_vision_technologies | sscms | cpe:/a:sheer_vision_technologies:sscms:::: |
Related
prion
prion
Cross site scripting
2006-03-28 11:06:00
nvd
nvd
CVE-2006-1405
2006-03-28 11:06:00
cvelist
cvelist
CVE-2006-1405
2006-03-28 11:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.004
Percentile
74.1%
Related for CVE-2006-1405