Lucene search

PRIOn knowledge basePRION:CVE-2006-1617

HistoryApr 05, 2006 - 10:04 a.m.

Cross site scripting

2006-04-0510:04:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to comments.php or (2) poll_id parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616.

CPENameOperatorVersion
advanced_polleq2.0.2

CPE	Name	Operator	Version
	advanced_poll	eq	2.0.2

References

ns79.hosteur.com/~secuti/advancedpoll.txt

exchange.xforce.ibmcloud.com/vulnerabilities/25677

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.2%

JSON

Related for PRION:CVE-2006-1617