Lucene search

MitreCVE-2006-3613

HistoryJul 18, 2006 - 3:46 p.m.

CVE-2006-3613

2006-07-1815:46:00

mitre

web.nvd.nist.gov

cve-2006-3613

cross-site scripting

xss

chamberland technology

ezwaiter 3.0

online

enterprise software

enterprise edition

web script

html

itemfor

special

item.php

showorder.php

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka “Who is this item for?”) and (2) special (aka “Special Instructions”) parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php.

Affected configurations

Nvd

Node

chamberland_technologyezwaiter_onlineMatch3.0

VendorProductVersionCPE
chamberland_technologyezwaiter_online3.0cpe:2.3:a:chamberland_technology:ezwaiter_online:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
chamberland_technology	ezwaiter_online	3.0	cpe:2.3:a:chamberland_technology:ezwaiter_online:3.0:::::::*

References

www.securityfocus.com/archive/1/438792/100/0/threaded

www.securityfocus.com/bid/18746

exchange.xforce.ibmcloud.com/vulnerabilities/27587

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Related for CVE-2006-3613