Lucene search

[email protected]CVE-2006-3259

HistoryJun 27, 2006 - 9:05 p.m.

CVE-2006-3259

2006-06-2721:05:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

xss

e107

web script

html

vulnerability

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) ep parameter to search.php and the (2) subject parameter in comment.php (aka the Subject field when posting a comment).

CPENameOperatorVersion
e107:e107e107eq0.551_beta
e107:e107e107eq0.6175
e107:e107e107eq0.616
e107:e107e107eq0.6174
e107:e107e107eq0.549_beta
e107:e107e107eq0.615a
e107:e107e107eq0.6_15
e107:e107e107eq0.7.4
e107:e107e107eq0.555_beta
e107:e107e107eq0.6173

CPE	Name	Operator	Version
e107:e107	e107	eq	0.551_beta
e107:e107	e107	eq	0.6175
e107:e107	e107	eq	0.616
e107:e107	e107	eq	0.6174
e107:e107	e107	eq	0.549_beta
e107:e107	e107	eq	0.615a
e107:e107	e107	eq	0.6_15
e107:e107	e107	eq	0.7.4
e107:e107	e107	eq	0.555_beta
e107:e107	e107	eq	0.6173

Rows per page:

1-10 of 471

References

secunia.com/advisories/20727

securityreason.com/securityalert/1151

www.securityfocus.com/archive/1/437649/100/0/threaded

www.securityfocus.com/bid/18508

www.securityfocus.com/bid/18560

www.vupen.com/english/advisories/2006/2460

exchange.xforce.ibmcloud.com/vulnerabilities/27240

exchange.xforce.ibmcloud.com/vulnerabilities/27242

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.4%

JSON