Lucene search
HistoryOct 23, 2006 - 5:07 p.m.
CVE-2006-5447
cve
2006
5447
cross-site scripting
xss
vulnerability
dev
web management system
wms
index.php
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.6%
Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Affected configurations
Node
devdev_web_management_systemMatch1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| dev:dev_web_management_system | dev dev web management system | eq | 1.5 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2006-5447