Lucene search
MitreCVE-2006-5958HistoryNov 17, 2006 - 1:07 a.m.
CVE-2006-5958
2006-11-1701:07:00
mitre
web.nvd.nist.gov
18
cve-2006-5958
xss
vulnerabilities
web script
html
remote attackers
login
search
email
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.2
Confidence
High
EPSS
0.025
Percentile
90.2%
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) search.asp, and (4) email field in © sendpassword.asp.
Affected configurations
Node
infinicartinfinicart
| Vendor | Product | Version | CPE |
|---|---|---|---|
| infinicart | infinicart | * | cpe:2.3:a:infinicart:infinicart:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-5958
2006-11-17 01:00:00
exploitdb
exploitdb
INFINICART - 'search.asp?search' Cross-Site Scripting
2006-11-13 00:00:00
INFINICART - 'sendpassword.asp?email' Cross-Site Scripting
2006-11-13 00:00:00
nvd
nvd
CVE-2006-5958
2006-11-17 01:07:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.2
Confidence
High
EPSS
0.025
Percentile
90.2%
Related for CVE-2006-5958