Lucene search

K
cve[email protected]CVE-2006-2184
HistoryMay 04, 2006 - 12:38 p.m.

CVE-2006-2184

2006-05-0412:38:00
NVD-CWE-Other
web.nvd.nist.gov
23
cve-2006-2184
cross-site scripting
xss
search.php
phpkb knowledge base
vulnerability
web script
html
remote attackers
nvd

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.9%

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that “We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues.”

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.9%

Related for CVE-2006-2184