Lucene search
HistoryJun 03, 2006 - 10:02 a.m.
CVE-2006-2803
cve
2006
2803
cross-site scripting
xss
php manualmaker
remote attackers
web script
html
index.php
search parameter
comment field
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.9 Medium
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.4%
Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id parameter to index.php, (2) search field (possibly the s parameter), or (3) comment field.
Affected configurations
Node
deltascriptsphp_manualmakerMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| deltascripts:php_manualmaker | deltascripts php manualmaker | eq | 1.0 |
Related
cvelist
cvelist
CVE-2006-2803
2006-06-03 10:00:00
prion
prion
Cross site scripting
2006-06-03 10:02:00
nvd
nvd
CVE-2006-2803
2006-06-03 10:02:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.9 Medium
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.4%
Related for CVE-2006-2803