Lucene search

[email protected]CVE-2006-2648

HistoryMay 30, 2006 - 10:02 a.m.

CVE-2006-2648

2006-05-3010:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2648

cross-site scripting

xss

perform_search.asp

aspbb 0.52

security vulnerability

web script injection

6.5 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.1%

JSON

Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter.

CPENameOperatorVersion
aspbb:aspbbaspbbeq0.4
aspbb:aspbbaspbbeq0.2
aspbb:aspbbaspbbeq0.5
aspbb:aspbbaspbbeq0.3.1
aspbb:aspbbaspbbeqalpha1
aspbb:aspbbaspbbeq0.3
aspbb:aspbbaspbbeq0.1
aspbb:aspbbaspbbeq0.1.1
aspbb:aspbbaspbbeq0.5.1
aspbb:aspbbaspbbeq0.5.2

CPE	Name	Operator	Version
aspbb:aspbb	aspbb	eq	0.4
aspbb:aspbb	aspbb	eq	0.2
aspbb:aspbb	aspbb	eq	0.5
aspbb:aspbb	aspbb	eq	0.3.1
aspbb:aspbb	aspbb	eq	alpha1
aspbb:aspbb	aspbb	eq	0.3
aspbb:aspbb	aspbb	eq	0.1
aspbb:aspbb	aspbb	eq	0.1.1
aspbb:aspbb	aspbb	eq	0.5.1
aspbb:aspbb	aspbb	eq	0.5.2

References

secunia.com/advisories/20360

securityreason.com/securityalert/983

securitytracker.com/id?1016169

www.nukedx.com/?viewdoc=32

www.securityfocus.com/archive/1/435280/100/0/threaded

www.securityfocus.com/bid/18146

www.vupen.com/english/advisories/2006/2027

exchange.xforce.ibmcloud.com/vulnerabilities/26819

6.5 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.1%

JSON

Related for CVE-2006-2648

prion1