Lucene search

[email protected]CVE-2006-1407

HistoryMar 28, 2006 - 11:06 a.m.

CVE-2006-1407

2006-03-2811:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2006

1407

xss

vulnerabilities

helm web hosting control panel

web script

html

remote attackers

domains.asp

default.asp

5.9 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp.

CPENameOperatorVersion
webhost_automation:helm_web_hosting_control_panelwebhost automation helm web hosting control panelle3.2.10

CPE	Name	Operator	Version
webhost_automation:helm_web_hosting_control_panel	webhost automation helm web hosting control panel	le	3.2.10

References

attrition.org/pipermail/vim/2006-March/000654.html

pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html

secunia.com/advisories/19375

www.osvdb.org/24125

www.osvdb.org/24126

www.securityfocus.com/bid/17263

www.vupen.com/english/advisories/2006/1093

exchange.xforce.ibmcloud.com/vulnerabilities/25470

exchange.xforce.ibmcloud.com/vulnerabilities/30309

5.9 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.4%

JSON

Related for CVE-2006-1407

prion1 cve1