Lucene search
HistoryJun 09, 2006 - 10:02 a.m.
CVE-2006-2913
cve
2006
2913
cross-site scripting
xss
vulnerability
selectapix
remote attackers
web script
html
albumid parameter
popup.php
view_album.php
nvd
5.9 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.5%
Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| out_of_the_trees_web_design:selectapix | out of the trees web design selectapix | eq | 1.31 |
Related
prion
prion
Cross site scripting
2006-06-09 10:02:00
packetstorm
packetstorm
secunia-SelectaPix.txt
2006-06-12 00:00:00
5.9 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.5%
Related for CVE-2006-2913