Lucene search

MitreCVE-2006-3071

HistoryJun 19, 2006 - 10:02 a.m.

CVE-2006-3071

2006-06-1910:02:00

mitre

web.nvd.nist.gov

cve-2006-3071

xss

vulnerability

mp3 search

archive 1.2

web script

html

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Cross-site scripting (XSS) vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter, as used by the “search box”, and (2) res parameter.

Affected configurations

Nvd

Node

anton_belevmp3_search_archiveMatch1.2

VendorProductVersionCPE
anton_belevmp3_search_archive1.2cpe:2.3:a:anton_belev:mp3_search_archive:1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
anton_belev	mp3_search_archive	1.2	cpe:2.3:a:anton_belev:mp3_search_archive:1.2:::::::*

References

secunia.com/advisories/20664

securityreason.com/securityalert/1112

www.osvdb.org/26530

www.securityfocus.com/archive/1/437283/100/0/threaded

www.vupen.com/english/advisories/2006/2385

exchange.xforce.ibmcloud.com/vulnerabilities/27234

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Related for CVE-2006-3071