Lucene search

[email protected]NVD:CVE-2006-7033

HistoryFeb 23, 2007 - 3:28 a.m.

CVE-2006-7033

2007-02-2303:28:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

77.0%

JSON

Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box.

Affected configurations

Nvd

Node

super_link_exchange_scriptsuper_link_exchange_scriptMatch1.0

VendorProductVersionCPE
super_link_exchange_scriptsuper_link_exchange_script1.0cpe:2.3:a:super_link_exchange_script:super_link_exchange_script:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
super_link_exchange_script	super_link_exchange_script	1.0	cpe:2.3:a:super_link_exchange_script:super_link_exchange_script:1.0:::::::*

References

securityreason.com/securityalert/2285

www.securityfocus.com/archive/1/435166/30/4680/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/26721

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.005

Percentile

77.0%

JSON

Related for NVD:CVE-2006-7033

cve1 cvelist1