Lucene search

K
cve[email protected]CVE-2006-6118
HistoryNov 26, 2006 - 10:07 p.m.

CVE-2006-6118

2006-11-2622:07:00
web.nvd.nist.gov
20
cve
2006
6118
cross-site scripting
xss
vulnerability
mmgallery
remote attackers
web script
html
thumbs.php

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected configurations

NVD
Node
mmgallerymmgalleryMatch1.55
CPENameOperatorVersion
mmgallery:mmgallerymmgalleryeq1.55

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

Related for CVE-2006-6118