Lucene search

[email protected]CVE-2006-3246

HistoryJun 27, 2006 - 10:05 a.m.

CVE-2006-3246

2006-06-2710:05:00

[email protected]

web.nvd.nist.gov

cve-2006-3246

cross-site scripting

xss

gl-sh deaf forum

web security

vulnerability

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Cross-site scripting (XSS) vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

Affected configurations

NVD

Node

gl-shdeaf_forumMatch6.4.3

CPENameOperatorVersion
gl-sh:deaf_forumgl-sh deaf forumeq6.4.3

CPE	Name	Operator	Version
gl-sh:deaf_forum	gl-sh deaf forum	eq	6.4.3

References

pridels0.blogspot.com/2006/06/gl-sh-deaf-forum-xss-vuln.html

secunia.com/advisories/20781

www.osvdb.org/26804

www.securityfocus.com/bid/18651

www.vupen.com/english/advisories/2006/2515

exchange.xforce.ibmcloud.com/vulnerabilities/27363

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for CVE-2006-3246

cvelist1 nvd1