Lucene search

PRIOn knowledge basePRION:CVE-2006-2927

HistoryJun 09, 2006 - 10:02 a.m.

Cross site scripting

2006-06-0910:02:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and (2) msg_body parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
codeavalanche_freeforumeq1.0

CPE	Name	Operator	Version
	codeavalanche_freeforum	eq	1.0

References

secunia.com/advisories/20411

www.securityfocus.com/bid/18239

www.vupen.com/english/advisories/2006/2117

exchange.xforce.ibmcloud.com/vulnerabilities/26888

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.9%

JSON

Related for PRION:CVE-2006-2927

cve1