Lucene search

K
nvd[email protected]NVD:CVE-2006-3166
HistoryJun 22, 2006 - 10:06 p.m.

CVE-2006-3166

2006-06-2222:06:00
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter.

Affected configurations

NVD
Node
free_realtyfree_realtyRange2.9_0.6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

Related for NVD:CVE-2006-3166