Lucene search
HistoryApr 05, 2006 - 10:04 a.m.
CVE-2006-1622
cve
2006
1622
cross-site scripting
xss
php
phpselect
linksubmit
web script
html
description parameter
linklist.php
index.php
linksubmit.php
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.9%
Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the description parameter to linklist.php and possibly other vectors involving (2) index.php and (3) linksubmit.php.
Affected configurations
Node
phpselectphpselect
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpselect:phpselect | phpselect | eq | * |
Related
nvd
nvd
CVE-2006-1622
2006-04-05 10:04:00
cvelist
cvelist
CVE-2006-1622
2006-04-05 10:00:00
prion
prion
Cross site scripting
2006-04-05 10:04:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.9%
Related for CVE-2006-1622