Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-4299
HistoryAug 23, 2006 - 12:00 a.m.

CVE-2006-4299

2006-08-2300:00:00
ubuntu.com
ubuntu.com
7

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.0%

Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in
TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or
HTML via the highlight parameter. NOTE: the provenance of this information
is unknown; the details are obtained from third party information.

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchtikiwiki< 1.9.7+dfsg-1ubuntu1UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.0%