Lucene search

[email protected]CVE-2006-3237

HistoryJun 27, 2006 - 10:05 a.m.

CVE-2006-3237

2006-06-2710:05:00

[email protected]

web.nvd.nist.gov

cve-2006-3237

cross-site scripting

xss

egs

enterprise groupware system

security vulnerability

web script injection

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.

Affected configurations

NVD

Node

senokian_solutionsenterprise_groupware_systemsRange≤1.2.4

senokian_solutionsenterprise_groupware_systemsMatch1.0

senokian_solutionsenterprise_groupware_systemsMatch1.0_rc1

senokian_solutionsenterprise_groupware_systemsMatch1.0_rc2

senokian_solutionsenterprise_groupware_systemsMatch1.0_rc3

senokian_solutionsenterprise_groupware_systemsMatch1.0_rc4

senokian_solutionsenterprise_groupware_systemsMatch1.0_rc5

senokian_solutionsenterprise_groupware_systemsMatch1.1

senokian_solutionsenterprise_groupware_systemsMatch1.01

senokian_solutionsenterprise_groupware_systemsMatch1.1.1

senokian_solutionsenterprise_groupware_systemsMatch1.1.2

senokian_solutionsenterprise_groupware_systemsMatch1.2

senokian_solutionsenterprise_groupware_systemsMatch1.2.1

senokian_solutionsenterprise_groupware_systemsMatch1.2.2

senokian_solutionsenterprise_groupware_systemsMatch1.2.3

CPENameOperatorVersion
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemsle1.2.4
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.0
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.0_rc1
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.0_rc2
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.0_rc3
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.0_rc4
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.0_rc5
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.1
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.01
senokian_solutions:enterprise_groupware_systemssenokian solutions enterprise groupware systemseq1.1.1

CPE	Name	Operator	Version
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	le	1.2.4
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.0
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.0_rc1
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.0_rc2
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.0_rc3
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.0_rc4
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.0_rc5
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.1
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.01
senokian_solutions:enterprise_groupware_systems	senokian solutions enterprise groupware systems	eq	1.1.1

Rows per page:

1-10 of 151

References

pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html

secunia.com/advisories/20757

securitytracker.com/id?1016358

www.securityfocus.com/bid/18590

www.vupen.com/english/advisories/2006/2483

exchange.xforce.ibmcloud.com/vulnerabilities/27282

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for CVE-2006-3237

nvd1 cvelist1