Lucene search

[email protected]CVE-2006-2799

HistoryJun 03, 2006 - 10:02 a.m.

CVE-2006-2799

2006-06-0310:02:00

[email protected]

web.nvd.nist.gov

cve

2006

2799

cross-site scripting

xss

vulnerability

toendacms

content_footer.php

remote attackers

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON

Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the print_url variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources.

Affected configurations

NVD

Node

toenda_software_developmenttoendacmsRange≤0.7

toenda_software_developmenttoendacmsMatch0.6

toenda_software_developmenttoendacmsMatch0.6.1

toenda_software_developmenttoendacmsMatch0.6.2.1

toenda_software_developmenttoendacmsMatch0.6_beta_1

toenda_software_developmenttoendacmsMatch0.6_beta_2

toenda_software_developmenttoendacmsMatch0.6_beta_3

toenda_software_developmenttoendacmsMatch0.6_pre-beta

CPENameOperatorVersion
toenda_software_development:toendacmstoenda software development toendacmsle0.7
toenda_software_development:toendacmstoenda software development toendacmseq0.6
toenda_software_development:toendacmstoenda software development toendacmseq0.6.1
toenda_software_development:toendacmstoenda software development toendacmseq0.6.2.1
toenda_software_development:toendacmstoenda software development toendacmseq0.6_beta_1
toenda_software_development:toendacmstoenda software development toendacmseq0.6_beta_2
toenda_software_development:toendacmstoenda software development toendacmseq0.6_beta_3
toenda_software_development:toendacmstoenda software development toendacmseq0.6_pre-beta

CPE	Name	Operator	Version
toenda_software_development:toendacms	toenda software development toendacms	le	0.7
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6.1
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6.2.1
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6_beta_1
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6_beta_2
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6_beta_3
toenda_software_development:toendacms	toenda software development toendacms	eq	0.6_pre-beta

References

secunia.com/advisories/20391

www.securityfocus.com/bid/18207

www.vupen.com/english/advisories/2006/2081

exchange.xforce.ibmcloud.com/vulnerabilities/27611

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON

Related for CVE-2006-2799

nvd1 prion1 cvelist1