Lucene search

[email protected]CVE-2006-1967

HistoryApr 21, 2006 - 10:02 a.m.

CVE-2006-1967

2006-04-2110:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-1967

cross-site scripting

xss vulnerability

kcscripts calendar

injection

html

web security

6.3 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.

CPENameOperatorVersion
kcscripts:portal_packkcscripts portal packeq6.0
kcscripts:kcscripts_calendarkcscripts kcscripts calendareq6.1

CPE	Name	Operator	Version
kcscripts:portal_pack	kcscripts portal pack	eq	6.0
kcscripts:kcscripts_calendar	kcscripts kcscripts calendar	eq	6.1

References

pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html

secunia.com/advisories/19695

securityreason.com/securityalert/503

www.osvdb.org/24761

www.securityfocus.com/bid/17628

www.vupen.com/english/advisories/2006/1440

exchange.xforce.ibmcloud.com/vulnerabilities/25940

6.3 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2006-1967

prion1