Lucene search

K
cve[email protected]CVE-2006-6815
HistoryDec 29, 2006 - 11:28 a.m.

CVE-2006-6815

2006-12-2911:28:00
web.nvd.nist.gov
22
cve
2006
6815
cross-site scripting
xss
dmxready secure login manager
web security
nvd

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

Multiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/list.asp in the Local-Admin Panel.

Affected configurations

NVD
Node
dmxreadydmxready_secure_login_managerMatch1.0

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

Related for CVE-2006-6815