Lucene search

[email protected]CVE-2006-2306

HistoryMay 11, 2006 - 10:02 a.m.

CVE-2006-2306

2006-05-1110:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

xss

vulnerability

epublisherpro

moreinfo.asp

web script

html

6.1 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

83.1%

JSON

Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
keyvan_janghorbani:epublisherprokeyvan janghorbani epublisherproeq*

CPE	Name	Operator	Version
keyvan_janghorbani:epublisherpro	keyvan janghorbani epublisherpro	eq	*

References

secunia.com/advisories/20006

www.osvdb.org/25330

www.securityfocus.com/bid/17907

www.vupen.com/english/advisories/2006/1751

exchange.xforce.ibmcloud.com/vulnerabilities/26344

6.1 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

83.1%

JSON

Related for CVE-2006-2306

prion1