Lucene search

[email protected]CVE-2006-3241

HistoryJun 27, 2006 - 10:05 a.m.

CVE-2006-3241

2006-06-2710:05:00

[email protected]

web.nvd.nist.gov

cve-2006-3241

xss

web script injection

html injection

nvd

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON

Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter.

Affected configurations

NVD

Node

xennobbxennobbMatch1.0

xennobbxennobbMatch1.0.1

xennobbxennobbMatch1.0.2

xennobbxennobbMatch1.0.3

xennobbxennobbMatch1.0.4

xennobbxennobbMatch1.0.5

CPENameOperatorVersion
xennobb:xennobbxennobbeq1.0
xennobb:xennobbxennobbeq1.0.1
xennobb:xennobbxennobbeq1.0.2
xennobb:xennobbxennobbeq1.0.3
xennobb:xennobbxennobbeq1.0.4
xennobb:xennobbxennobbeq1.0.5

CPE	Name	Operator	Version
xennobb:xennobb	xennobb	eq	1.0
xennobb:xennobb	xennobb	eq	1.0.1
xennobb:xennobb	xennobb	eq	1.0.2
xennobb:xennobb	xennobb	eq	1.0.3
xennobb:xennobb	xennobb	eq	1.0.4
xennobb:xennobb	xennobb	eq	1.0.5

References

pridels0.blogspot.com/2006/06/xennobb-xss-vuln.html

secunia.com/advisories/20797

www.securityfocus.com/bid/18652

www.vupen.com/english/advisories/2006/2510

exchange.xforce.ibmcloud.com/vulnerabilities/27367

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON

Related for CVE-2006-3241

cvelist1 nvd1