Lucene search
MitreCVE-2006-3756HistoryJul 21, 2006 - 2:03 p.m.
CVE-2006-3756
2006-07-2114:03:00
CWE-79
mitre
web.nvd.nist.gov
25
cve-2006-3756
cross-site scripting
xss
geeklog
vulnerability
nvd
security
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.004
Percentile
73.1%
Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in (1) lib-comment.php (1.4.0sr4) or (2) comment.php (0.3.11sr6).
Affected configurations
Node
geekloggeeklogMatch1.3.11
ORgeekloggeeklogMatch1.3.11sr1
ORgeekloggeeklogMatch1.3.11sr2
ORgeekloggeeklogMatch1.3.11sr3
ORgeekloggeeklogMatch1.3.11sr4
ORgeekloggeeklogMatch1.3.11sr5
ORgeekloggeeklogMatch1.3.11sr6
ORgeekloggeeklogMatch1.4.0
ORgeekloggeeklogMatch1.4.0sr1
ORgeekloggeeklogMatch1.4.0sr2
ORgeekloggeeklogMatch1.4.0sr3
ORgeekloggeeklogMatch1.4.0sr4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:sr1:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:sr2:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:sr3:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:sr4:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:sr5:*:*:*:*:*:* |
| geeklog | geeklog | 1.3.11 | cpe:2.3:a:geeklog:geeklog:1.3.11:sr6:*:*:*:*:*:* |
| geeklog | geeklog | 1.4.0 | cpe:2.3:a:geeklog:geeklog:1.4.0:*:*:*:*:*:*:* |
| geeklog | geeklog | 1.4.0 | cpe:2.3:a:geeklog:geeklog:1.4.0:sr1:*:*:*:*:*:* |
| geeklog | geeklog | 1.4.0 | cpe:2.3:a:geeklog:geeklog:1.4.0:sr2:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-3756
2006-07-20 23:00:00
freebsd
freebsd
geeklog xss vulnerability
2008-01-08 00:00:00
nvd
nvd
CVE-2006-3756
2006-07-21 14:03:00
openvas
openvas
FreeBSD Ports: geeklog
2008-09-04 00:00:00
FreeBSD Ports: geeklog
2008-09-04 00:00:00
nessus
nessus
FreeBSD : geeklog xss vulnerability (60e1792b-c380-11dc-821a-000bcdc1757a)
2008-01-16 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.004
Percentile
73.1%
Related for CVE-2006-3756