Lucene search
HistoryJan 11, 2007 - 11:28 p.m.
CVE-2006-6919
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.051
Percentile
93.0%
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing “>”, which Sage modifies to close the img element before the malicious script.
Affected configurations
Node
sage-mozdevsageRange≤1.3.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sage-mozdev | sage | * | cpe:2.3:a:sage-mozdev:sage:*:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Sage 1.3.6 - Input Validation
2006-09-08 00:00:00
cvelist
cvelist
CVE-2006-6919
2007-01-11 23:00:00
cve
cve
CVE-2006-6919
2007-01-11 23:28:00
securityvulns
securityvulns
Multiple RSS applications crosssite scripting
2007-02-04 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.051
Percentile
93.0%
Related for NVD:CVE-2006-6919