Lucene search
HistoryMar 21, 2006 - 1:06 a.m.
CVE-2006-1331
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.8
Confidence
High
EPSS
0.041
Percentile
92.2%
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah’s Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter.
Affected configurations
Node
phpoutsourcingnoahs_classifiedsRange≤1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpoutsourcing | noahs_classifieds | * | cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2006-03-21 01:06:00
cvelist
cvelist
CVE-2006-1331
2006-03-21 01:00:00
cve
cve
CVE-2006-1331
2006-03-21 01:06:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.8
Confidence
High
EPSS
0.041
Percentile
92.2%
Related for NVD:CVE-2006-1331