Lucene search

MitreCVE-2006-5661

HistoryNov 03, 2006 - 12:07 a.m.

CVE-2006-5661

2006-11-0300:07:00

mitre

web.nvd.nist.gov

cve-2006-5661

cross-site scripting

xss

nquser.php

virtech netquery

remote code injection

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.051

Percentile

93.1%

JSON

Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

Affected configurations

Nvd

Node

virtechnetqueryMatche107_edition

virtechnetqueryMatchpostnuke_edition

virtechnetqueryMatchxaraya_edition

virtechnetqueryMatchxoops_edition

VendorProductVersionCPE
virtechnetquerye107_editioncpe:2.3:a:virtech:netquery:e107_edition:*:*:*:*:*:*:*
virtechnetquerypostnuke_editioncpe:2.3:a:virtech:netquery:postnuke_edition:*:*:*:*:*:*:*
virtechnetqueryxaraya_editioncpe:2.3:a:virtech:netquery:xaraya_edition:*:*:*:*:*:*:*
virtechnetqueryxoops_editioncpe:2.3:a:virtech:netquery:xoops_edition:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
virtech	netquery	e107_edition	cpe:2.3:a:virtech:netquery:e107_edition:::::::*
virtech	netquery	postnuke_edition	cpe:2.3:a:virtech:netquery:postnuke_edition:::::::*
virtech	netquery	xaraya_edition	cpe:2.3:a:virtech:netquery:xaraya_edition:::::::*
virtech	netquery	xoops_edition	cpe:2.3:a:virtech:netquery:xoops_edition:::::::*

References

lists.grok.org.uk/pipermail/full-disclosure/2006-October/050462.html

secunia.com/advisories/22864

securityreason.com/securityalert/1807

securitytracker.com/id?1017147

virtech.org/tools/

www.securityfocus.com/archive/1/450270/100/0/threaded

www.securityfocus.com/archive/1/451350/100/100/threaded

www.securityfocus.com/bid/20837

www.vupen.com/english/advisories/2006/4512

www.zion-security.com/text/XSS_Vulnerability_VIRtechs_Netquery.txt

exchange.xforce.ibmcloud.com/vulnerabilities/29927

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.051

Percentile

93.1%

JSON

Related for CVE-2006-5661