Lucene search

MitreCVE-2006-3616

HistoryJul 18, 2006 - 3:46 p.m.

CVE-2006-3616

2006-07-1815:46:00

mitre

web.nvd.nist.gov

xss

vulnerabilities

carbonize lazarus guestbook

web script

html

remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.012

Percentile

85.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file.

Affected configurations

Nvd

Node

carbonizelazarus_guestbookRange≤1.6

VendorProductVersionCPE
carbonizelazarus_guestbook*cpe:2.3:a:carbonize:lazarus_guestbook:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
carbonize	lazarus_guestbook	*	cpe:2.3:a:carbonize:lazarus_guestbook::::::::

References

secunia.com/advisories/21034

securitytracker.com/id?1016486

www.osvdb.org/27089

www.osvdb.org/27090

www.securityfocus.com/archive/1/439904/100/0/threaded

www.securityfocus.com/bid/18956

www.vupen.com/english/advisories/2006/2784

exchange.xforce.ibmcloud.com/vulnerabilities/27714

exchange.xforce.ibmcloud.com/vulnerabilities/27716

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.012

Percentile

85.3%

JSON

Related for CVE-2006-3616