Lucene search

K
cve[email protected]CVE-2006-3157
HistoryJun 22, 2006 - 10:06 p.m.

CVE-2006-3157

2006-06-2222:06:00
web.nvd.nist.gov
20
cve-2006-3157
xss vulnerability
thinkfactory ultimategoogle
web script injection
html injection
index.php

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter.

Affected configurations

NVD
Node
thinkfactoryultimategoogleRange1.00

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

Related for CVE-2006-3157