Lucene search

[email protected]NVD:CVE-2006-5799

HistoryNov 08, 2006 - 8:07 p.m.

CVE-2006-5799

2006-11-0820:07:00

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.

Affected configurations

NVD

Node

xenisxenis.creator_cms

References

marc.info/?l=bugtraq&m=116266150514762&w=2

secunia.com/advisories/22716

securitytracker.com/id?1017162

www.majorsecurity.de/index_2.php?major_rls=major_rls31

www.securityfocus.com/bid/20908

www.vupen.com/english/advisories/2006/4470

exchange.xforce.ibmcloud.com/vulnerabilities/30019

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

Related for NVD:CVE-2006-5799

cve1 cvelist1