Lucene search
PRIOn knowledge basePRION:CVE-2006-1841HistoryApr 19, 2006 - 4:06 p.m.
Cross site scripting
2006-04-1916:06:00
PRIOn knowledge base
www.prio-n.com
2
6.2 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.4%
Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| boastmachine | eq | 2.8 | |
| boastmachine | eq | 2.7 | |
| boastmachine | eq | 2.9.98 | |
| boastmachine | eq | 2.5 |
6.2 Medium
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.4%
Related for PRION:CVE-2006-1841