Lucene search

[email protected]CVE-2006-3272

HistoryJun 28, 2006 - 10:05 p.m.

CVE-2006-3272

2006-06-2822:05:00

[email protected]

web.nvd.nist.gov

cve-2006-3272

csrf

some chess 1.5 rc2

security vulnerability

cross-site request forgery

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.6%

JSON

Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct actions as another user, such as changing usernames and passwords, via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected configurations

NVD

Node

astrodog_presssome_chessMatch1.5_rc2

CPENameOperatorVersion
astrodog_press:some_chessastrodog press some chesseq1.5_rc2

CPE	Name	Operator	Version
astrodog_press:some_chess	astrodog press some chess	eq	1.5_rc2

References

secunia.com/advisories/20770

exchange.xforce.ibmcloud.com/vulnerabilities/27307

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.6%

JSON

Related for CVE-2006-3272

cvelist1 nvd1