Lucene search

MitreCVE-2006-4608

HistorySep 07, 2006 - 12:04 a.m.

CVE-2006-4608

2006-09-0700:04:00

mitre

web.nvd.nist.gov

cve

2006

4608

cross-site scripting

xss

longino jacome

php-revista

web script

html

remote attackers

busqueda.php

lista.php

vulnerability

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cadena parameter in busqueda.php and the (2) email parameter in lista.php.

Affected configurations

Nvd

Node

longinojacome_php-revistaMatch1.1.2

VendorProductVersionCPE
longinojacome_php-revista1.1.2cpe:2.3:a:longino:jacome_php-revista:1.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
longino	jacome_php-revista	1.1.2	cpe:2.3:a:longino:jacome_php-revista:1.1.2:::::::*

References

secunia.com/advisories/21738

securityreason.com/securityalert/1499

www.attrition.org/pipermail/vim/2009-April/002167.html

www.osvdb.org/28450

www.securityfocus.com/archive/1/445007/100/0/threaded

www.securityfocus.com/archive/1/502637/100/0/threaded

www.securityfocus.com/bid/19818

www.exploit-db.com/exploits/8425

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Related for CVE-2006-4608