Lucene search

[email protected]CVE-2006-2874

HistoryJun 06, 2006 - 8:06 p.m.

CVE-2006-2874

2006-06-0620:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2874

unspecified vulnerability

osads alliance database

security leak

html-code

cross-site scripting

xss

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

52.9%

JSON

Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a “Security Leak to lock in HTML-Code,” possibly due to a cross-site scripting (XSS) vulnerability involving comments.

CPENameOperatorVersion
osads_alliance_database:osads_alliance_databaseosads alliance databaseeq1.2
osads_alliance_database:osads_alliance_databaseosads alliance databaseeq1.3
osads_alliance_database:osads_alliance_databaseosads alliance databaseeq1.1

CPE	Name	Operator	Version
osads_alliance_database:osads_alliance_database	osads alliance database	eq	1.2
osads_alliance_database:osads_alliance_database	osads alliance database	eq	1.3
osads_alliance_database:osads_alliance_database	osads alliance database	eq	1.1

References

osads.sourceforge.net/viewtopic.php?t=3

secunia.com/advisories/20441

sourceforge.net/project/shownotes.php?release_id=422081

www.securityfocus.com/bid/18280

www.vupen.com/english/advisories/2006/2143

exchange.xforce.ibmcloud.com/vulnerabilities/26914

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

52.9%

JSON

Related for CVE-2006-2874

prion2 cve1