Lucene search

K
nvd[email protected]NVD:CVE-2006-2986
HistoryJun 13, 2006 - 1:02 a.m.

CVE-2006-2986

2006-06-1301:02:00
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

76.1%

Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.

Affected configurations

Nvd
Node
baby_katie_mediavery_simple_car_listerMatch1.0
OR
baby_katie_mediavery_simple_realty_listerMatch1.0
VendorProductVersionCPE
baby_katie_mediavery_simple_car_lister1.0cpe:2.3:a:baby_katie_media:very_simple_car_lister:1.0:*:*:*:*:*:*:*
baby_katie_mediavery_simple_realty_lister1.0cpe:2.3:a:baby_katie_media:very_simple_realty_lister:1.0:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

76.1%

Related for NVD:CVE-2006-2986