Lucene search

[email protected]CVE-2006-6366

HistoryDec 07, 2006 - 11:28 a.m.

CVE-2006-6366

2006-12-0711:28:00

[email protected]

web.nvd.nist.gov

cve-2006-6366

cross-site scripting

xss vulnerability

cerberus helpdesk

remote attackers

arbitrary web script

html

js parameter

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remote attackers to inject arbitrary web script or HTML via the js parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

cerberushelpdeskMatch0.97.3

cerberushelpdeskMatch2.0

cerberushelpdeskMatch2.1

cerberushelpdeskMatch2.2

cerberushelpdeskMatch2.3

cerberushelpdeskMatch2.4

cerberushelpdeskMatch2.5

cerberushelpdeskMatch2.6.1

cerberushelpdeskMatch2.7

cerberushelpdeskMatch2.7.1

cerberushelpdeskMatch3.2.1

cerberushelpdeskMatch3.2.317

cerberushelpdeskMatch3.3

CPENameOperatorVersion
cerberus:helpdeskcerberus helpdeskeq0.97.3
cerberus:helpdeskcerberus helpdeskeq2.0
cerberus:helpdeskcerberus helpdeskeq2.1
cerberus:helpdeskcerberus helpdeskeq2.2
cerberus:helpdeskcerberus helpdeskeq2.3
cerberus:helpdeskcerberus helpdeskeq2.4
cerberus:helpdeskcerberus helpdeskeq2.5
cerberus:helpdeskcerberus helpdeskeq2.6.1
cerberus:helpdeskcerberus helpdeskeq2.7
cerberus:helpdeskcerberus helpdeskeq2.7.1

CPE	Name	Operator	Version
cerberus:helpdesk	cerberus helpdesk	eq	0.97.3
cerberus:helpdesk	cerberus helpdesk	eq	2.0
cerberus:helpdesk	cerberus helpdesk	eq	2.1
cerberus:helpdesk	cerberus helpdesk	eq	2.2
cerberus:helpdesk	cerberus helpdesk	eq	2.3
cerberus:helpdesk	cerberus helpdesk	eq	2.4
cerberus:helpdesk	cerberus helpdesk	eq	2.5
cerberus:helpdesk	cerberus helpdesk	eq	2.6.1
cerberus:helpdesk	cerberus helpdesk	eq	2.7
cerberus:helpdesk	cerberus helpdesk	eq	2.7.1

Rows per page:

1-10 of 131

References

secunia.com/advisories/23193

www.securityfocus.com/bid/21423

www.vupen.com/english/advisories/2006/4875

exchange.xforce.ibmcloud.com/vulnerabilities/30719

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

Related for CVE-2006-6366

cvelist1 nvd1