Lucene search

K
cve[email protected]CVE-2006-2610
HistoryMay 26, 2006 - 1:06 a.m.

CVE-2006-2610

2006-05-2601:06:00
web.nvd.nist.gov
23
cve-2006-2610
cross-site scripting
xss
phpraid
vulnerability
web script injection

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web script or HTML via the (1) URL query string and the (2) Sort parameter.

Affected configurations

NVD
Node
spiffyjrphpraidMatch2.9.5

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

Related for CVE-2006-2610