Lucene search
MitreCVE-2006-6459HistoryDec 11, 2006 - 5:28 p.m.
CVE-2006-6459
2006-12-1117:28:00
mitre
web.nvd.nist.gov
27
cve-2006-6459
cross-site scripting
xss
vulnerability
toplist.php
phpbb toplist 1.3.7
remote attackers
arbitrary html
web script
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
High
EPSS
0.005
Percentile
77.1%
Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (toplistnew action).
Affected configurations
Node
phpbbtoplistMatch1.3.7
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
High
EPSS
0.005
Percentile
77.1%
Related for CVE-2006-6459