CVE-2006-3320

2006-06-3001:05:00

[email protected]

web.nvd.nist.gov

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.02

Percentile

89.0%

JSON

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

Affected configurations

Nvd

Node

sitebarsitebarRange≤3.3.8

sitebarsitebarMatch3.3.2

sitebarsitebarMatch3.3.3

sitebarsitebarMatch3.3.4

sitebarsitebarMatch3.3.5

sitebarsitebarMatch3.3.6

sitebarsitebarMatch3.3.7

VendorProductVersionCPE
sitebarsitebar*cpe:2.3:a:sitebar:sitebar:*:*:*:*:*:*:*:*
sitebarsitebar3.3.2cpe:2.3:a:sitebar:sitebar:3.3.2:*:*:*:*:*:*:*
sitebarsitebar3.3.3cpe:2.3:a:sitebar:sitebar:3.3.3:*:*:*:*:*:*:*
sitebarsitebar3.3.4cpe:2.3:a:sitebar:sitebar:3.3.4:*:*:*:*:*:*:*
sitebarsitebar3.3.5cpe:2.3:a:sitebar:sitebar:3.3.5:*:*:*:*:*:*:*
sitebarsitebar3.3.6cpe:2.3:a:sitebar:sitebar:3.3.6:*:*:*:*:*:*:*
sitebarsitebar3.3.7cpe:2.3:a:sitebar:sitebar:3.3.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sitebar	sitebar	*	cpe:2.3:a:sitebar:sitebar::::::::
sitebar	sitebar	3.3.2	cpe:2.3:a:sitebar:sitebar:3.3.2:::::::*
sitebar	sitebar	3.3.3	cpe:2.3:a:sitebar:sitebar:3.3.3:::::::*
sitebar	sitebar	3.3.4	cpe:2.3:a:sitebar:sitebar:3.3.4:::::::*
sitebar	sitebar	3.3.5	cpe:2.3:a:sitebar:sitebar:3.3.5:::::::*
sitebar	sitebar	3.3.6	cpe:2.3:a:sitebar:sitebar:3.3.6:::::::*
sitebar	sitebar	3.3.7	cpe:2.3:a:sitebar:sitebar:3.3.7:::::::*