CVE-2006-2678
5.9 Medium
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.017 Low
EPSS
Percentile
87.6%
Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, © email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pre_projects:pre_news_manager | pre projects pre news manager | eq | 1.0 |
References
secunia.com/advisories/20284
securityreason.com/securityalert/996
www.osvdb.org/26066
www.osvdb.org/26067
www.osvdb.org/26068
www.osvdb.org/26069
www.osvdb.org/26070
www.osvdb.org/26071
www.osvdb.org/26072
www.securityfocus.com/archive/1/435020/100/0/threaded
www.securityfocus.com/bid/18333
www.vupen.com/english/advisories/2006/1990
exchange.xforce.ibmcloud.com/vulnerabilities/26692
Related
5.9 Medium
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.017 Low
EPSS
Percentile
87.6%