Lucene search
HistoryJun 13, 2006 - 1:02 a.m.
CVE-2006-2997
cve-2006-2997
cross-site scripting
xss vulnerability
zms 2.9
web script injection
html injection
nvd
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.5%
Cross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field.
Affected configurations
Node
zms_publishingzmsRange≤2.9.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| zms_publishing:zms | zms publishing zms | le | 2.9.2 |
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.5%
Related for CVE-2006-2997