Lucene search

K
nvd[email protected]NVD:CVE-2006-6844
HistoryDec 31, 2006 - 5:00 a.m.

CVE-2006-6844

2006-12-3105:00:00
web.nvd.nist.gov
4

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.032

Percentile

91.4%

Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.

Affected configurations

Nvd
Node
cmsmadesimplecms_made_simpleMatch1.0.2
VendorProductVersionCPE
cmsmadesimplecms_made_simple1.0.2cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.2:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.032

Percentile

91.4%

Related for NVD:CVE-2006-6844