Lucene search

[email protected]NVD:CVE-2006-2506

HistoryMay 22, 2006 - 7:02 p.m.

CVE-2006-2506

2006-05-2219:02:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.6

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO and (2) the category parameter.

Affected configurations

Nvd

Node

sphidersphiderMatch1.3

sphidersphiderMatch1.3_rc1

sphidersphiderMatch1.3_rc2

sphidersphiderMatch1.3b

VendorProductVersionCPE
sphidersphider1.3cpe:2.3:a:sphider:sphider:1.3:*:*:*:*:*:*:*
sphidersphider1.3_rc1cpe:2.3:a:sphider:sphider:1.3_rc1:*:*:*:*:*:*:*
sphidersphider1.3_rc2cpe:2.3:a:sphider:sphider:1.3_rc2:*:*:*:*:*:*:*
sphidersphider1.3bcpe:2.3:a:sphider:sphider:1.3b:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sphider	sphider	1.3	cpe:2.3:a:sphider:sphider:1.3:::::::*
sphider	sphider	1.3_rc1	cpe:2.3:a:sphider:sphider:1.3_rc1:::::::*
sphider	sphider	1.3_rc2	cpe:2.3:a:sphider:sphider:1.3_rc2:::::::*
sphider	sphider	1.3b	cpe:2.3:a:sphider:sphider:1.3b:::::::*

References

securityreason.com/securityalert/930

soot.shabgard.org/bugs/Sphider.txt

www.osvdb.org/25573

www.securityfocus.com/archive/1/434119/100/0/threaded

www.securityfocus.com/bid/17997

www.vupen.com/english/advisories/2006/1845

exchange.xforce.ibmcloud.com/vulnerabilities/26482

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.6

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

Related for NVD:CVE-2006-2506

prion2 cvelist3 cve3 nvd2