Lucene search

K
nvd[email protected]NVD:CVE-2006-2066
HistoryApr 27, 2006 - 1:34 p.m.

CVE-2006-2066

2006-04-2713:34:00
CWE-79
web.nvd.nist.gov
3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.02

Percentile

89.2%

Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.

Affected configurations

Nvd
Node
mkportalmkportalMatch1.1_rc1
VendorProductVersionCPE
mkportalmkportal1.1_rc1cpe:2.3:a:mkportal:mkportal:1.1_rc1:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.02

Percentile

89.2%

Related for NVD:CVE-2006-2066