Lucene search

[email protected]NVD:CVE-2006-1722

HistoryApr 11, 2006 - 11:02 p.m.

CVE-2006-1722

2006-04-1123:02:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

75.3%

JSON

Cross-site scripting (XSS) vulnerability in suche.htm in ShopXS 4.0 allows remote attackers to inject arbitrary web script or HTML via the Suchstring1 (aka search) parameter.

Affected configurations

Nvd

Node

sucheshopxsMatch4.0

VendorProductVersionCPE
sucheshopxs4.0cpe:2.3:a:suche:shopxs:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
suche	shopxs	4.0	cpe:2.3:a:suche:shopxs:4.0:::::::*

References

pridels0.blogspot.com/2006/04/shopxs-v40-xss-vuln_10.html

exchange.xforce.ibmcloud.com/vulnerabilities/25715

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

75.3%

JSON

Related for NVD:CVE-2006-1722

prion1 cve1 cvelist1