Lucene search

[email protected]NVD:CVE-2006-3305

HistoryJun 29, 2006 - 1:05 a.m.

CVE-2006-3305

2006-06-2901:05:00

[email protected]

web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f_user parameter in index.php, the (2) pag parameter in messages.php, or the (3) lid, (4) tid, and (5) sid parameters in error.php.

Affected configurations

NVD

Node

uebimiauuebimiauRange≤2.7.2

uebimiauuebimiauMatch2.7.10

References

pridels0.blogspot.com/2006/06/uebimiau-webmail-xss-vuln.html

secunia.com/advisories/20804

www.securityfocus.com/bid/18643

www.securityfocus.com/bid/22375

www.vupen.com/english/advisories/2006/2513

exchange.xforce.ibmcloud.com/vulnerabilities/27371

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for NVD:CVE-2006-3305

cvelist1 cve1