Lucene search

MitreCVE-2006-3079

HistoryJun 19, 2006 - 10:02 a.m.

CVE-2006-3079

2006-06-1910:02:00

mitre

web.nvd.nist.gov

cve-2006-3079

cross-site scripting

xss

vulnerability

index.cfm

sspwiz plus 1.0.7

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Cross-site scripting (XSS) vulnerability in index.cfm in SSPwiz Plus 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected configurations

Nvd

Node

sspwizsspwiz_plusRange≤1.0.7

VendorProductVersionCPE
sspwizsspwiz_plus*cpe:2.3:a:sspwiz:sspwiz_plus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sspwiz	sspwiz_plus	*	cpe:2.3:a:sspwiz:sspwiz_plus::::::::

References

pridels0.blogspot.com/2006/06/sspwiz-xss-vuln.html

secunia.com/advisories/20698

www.osvdb.org/26532

www.securityfocus.com/bid/18482

exchange.xforce.ibmcloud.com/vulnerabilities/27149

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Related for CVE-2006-3079