Lucene search

[email protected]CVE-2006-2340

HistoryMay 12, 2006 - 1:02 a.m.

CVE-2006-2340

2006-05-1201:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2340

cross-site scripting

passmasterflex

passmasterflexplus

security vulnerability

nvd

6.3 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in the Hack Log.

CPENameOperatorVersion
lethal_penguin:passmasterflexpluslethal penguin passmasterflexpluseq1.2
lethal_penguin:passmasterflexlethal penguin passmasterflexeq1.2

CPE	Name	Operator	Version
lethal_penguin:passmasterflexplus	lethal penguin passmasterflexplus	eq	1.2
lethal_penguin:passmasterflex	lethal penguin passmasterflex	eq	1.2

References

archives.neohapsis.com/archives/bugtraq/2006-05/0108.html

secunia.com/advisories/20020

securityreason.com/securityalert/879

www.osvdb.org/25302

www.securityfocus.com/bid/17866

www.vupen.com/english/advisories/2006/1696

exchange.xforce.ibmcloud.com/vulnerabilities/26298

6.3 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2006-2340

prion1