Lucene search

K
cveMitreCVE-2005-1006
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1006

2005-05-0204:00:00
CWE-79
mitre
web.nvd.nist.gov
28
xss
sonicwall
soho
5.1.7.0
remote attackers
web script
html
security vulnerability
nvd
cve-2005-1006

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

79.4%

Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.

Affected configurations

Nvd
Node
sonicwallsoho_firmwareMatch5.1.7.0
AND
sonicwallsohoMatch-
VendorProductVersionCPE
sonicwallsoho_firmware5.1.7.0cpe:2.3:o:sonicwall:soho_firmware:5.1.7.0:*:*:*:*:*:*:*
sonicwallsoho-cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

79.4%

Related for CVE-2005-1006