Lucene search

[email protected]CVE-2006-2265

HistoryMay 09, 2006 - 10:02 a.m.

CVE-2006-2265

2006-05-0910:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ocean12

calendar manager pro

xss

vulnerability

admin/main.asp

cve-2006-2265

nvd

6.5 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.5%

JSON

Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
ocean12_technologies:calendar_manager_proocean12 technologies calendar manager proeq1.00

CPE	Name	Operator	Version
ocean12_technologies:calendar_manager_pro	ocean12 technologies calendar manager pro	eq	1.00

References

secunia.com/advisories/20036

www.osvdb.org/25347

www.securityfocus.com/bid/17877

www.vupen.com/english/advisories/2006/1705

exchange.xforce.ibmcloud.com/vulnerabilities/26335

6.5 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.5%

JSON

Related for CVE-2006-2265

prion1