Lucene search
MitreCVE-2006-6844HistoryJan 03, 2007 - 2:00 a.m.
CVE-2006-6844
2007-01-0302:00:00
mitre
web.nvd.nist.gov
24
cve-2006-6844
xss
cms made simple
vulnerability
web script
html
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
High
EPSS
0.032
Percentile
91.4%
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.
Affected configurations
Node
cmsmadesimplecms_made_simpleMatch1.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cmsmadesimple | cms_made_simple | 1.0.2 | cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.2:*:*:*:*:*:*:* |
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.9
Confidence
High
EPSS
0.032
Percentile
91.4%
Related for CVE-2006-6844