Lucene search
HistoryJan 11, 2007 - 11:28 p.m.
CVE-2006-6920
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
87.3%
Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php.
Affected configurations
Node
nucleus_cmsnucleus_cmsMatch3.0
ORnucleus_cmsnucleus_cmsMatch3.0_rc
ORnucleus_cmsnucleus_cmsMatch3.01
ORnucleus_cmsnucleus_cmsMatch3.1
ORnucleus_cmsnucleus_cmsMatch3.2
ORnucleus_cmsnucleus_cmsMatch3.21
ORnucleus_cmsnucleus_cmsMatch3.22
ORnucleus_cmsnucleus_cmsMatch3.23
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
87.3%
Related for NVD:CVE-2006-6920