Lucene search

MitreCVE-2006-2001

HistoryApr 25, 2006 - 12:50 p.m.

CVE-2006-2001

2006-04-2512:50:00

mitre

web.nvd.nist.gov

cve

2006

2001

xss

vulnerability

index.php

scry gallery 1.1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.7%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this is a different vulnerability than the directory traversal vector.

Affected configurations

Nvd

Node

scry_galleryscry_galleryMatch1.1

VendorProductVersionCPE
scry_galleryscry_gallery1.1cpe:2.3:a:scry_gallery:scry_gallery:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
scry_gallery	scry_gallery	1.1	cpe:2.3:a:scry_gallery:scry_gallery:1.1:::::::*

References

attrition.org/pipermail/vim/2006-April/000716.html

secunia.com/advisories/19777

securityreason.com/securityalert/783

www.osvdb.org/24891

www.securityfocus.com/archive/1/431853/100/0/threaded

www.securityfocus.com/bid/17668

www.vupen.com/english/advisories/2006/1490

exchange.xforce.ibmcloud.com/vulnerabilities/26101

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.7%

JSON

Related for CVE-2006-2001