Lucene search

PRIOn knowledge basePRION:CVE-2006-2895

HistoryJun 07, 2006 - 10:02 a.m.

Cross site scripting

2006-06-0710:02:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form.

CPENameOperatorVersion
mediawikieq1.6.3
mediawikieq1.6.2
mediawikieq1.6.5
mediawikieq1.6.6
mediawikieq1.6.4
mediawikieq1.6.5-r14348
mediawikieq1.6.0
mediawikieq1.6.1

Name	Operator	Version
mediawiki	eq	1.6.3
mediawiki	eq	1.6.2
mediawiki	eq	1.6.5
mediawiki	eq	1.6.6
mediawiki	eq	1.6.4
mediawiki	eq	1.6.5-r14348
mediawiki	eq	1.6.0
mediawiki	eq	1.6.1

References

secunia.com/advisories/20458

www.vupen.com/english/advisories/2006/2159

exchange.xforce.ibmcloud.com/vulnerabilities/27029

mail.wikipedia.org/pipermail/mediawiki-announce/2006-June/000048.html

svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_7/phase3/RELEASE-NOTES

6.1 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.2%

JSON

Related for PRION:CVE-2006-2895