Lucene search

PRIOn knowledge basePRION:CVE-2006-0593

HistoryFeb 08, 2006 - 1:02 a.m.

Cross site scripting

2006-02-0801:02:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.2%

JSON

Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.

CPENameOperatorVersion
php_fusioneq6.00.105
php_fusioneq6.00.106
php_fusioneq6.00.103
php_fusioneq6.00.101
php_fusioneq6.00.107
php_fusioneq6.00.303
php_fusioneq6.00.104
php_fusioneq6.00.100
php_fusioneq6.00.108
php_fusioneq6.00.207

Name	Operator	Version
php_fusion	eq	6.00.105
php_fusion	eq	6.00.106
php_fusion	eq	6.00.103
php_fusion	eq	6.00.101
php_fusion	eq	6.00.107
php_fusion	eq	6.00.303
php_fusion	eq	6.00.104
php_fusion	eq	6.00.100
php_fusion	eq	6.00.108
php_fusion	eq	6.00.207

Rows per page:

1-10 of 181

References

secunia.com/advisories/18949

www.osvdb.org/22980

www.osvdb.org/22981

www.php-fusion.co.uk/downloads.php?cat_id=3

www.php-fusion.co.uk/news.php?readmore=307

www.securityfocus.com/bid/16548

www.vupen.com/english/advisories/2006/0463

exchange.xforce.ibmcloud.com/vulnerabilities/24548

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.2%

JSON

Related for PRION:CVE-2006-0593

cve1