Lucene search

[email protected]CVE-2006-1122

HistoryMar 09, 2006 - 9:02 p.m.

CVE-2006-1122

2006-03-0921:02:00

[email protected]

web.nvd.nist.gov

cve-2006-1122

cross-site scripting

xss

d2kblog 1.0.3

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

JSON

Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Affected configurations

NVD

Node

d2ksoftd2kblogMatch1.0

d2ksoftd2kblogMatch1.0.1

d2ksoftd2kblogMatch1.0.2

d2ksoftd2kblogMatch1.0.3

CPENameOperatorVersion
d2ksoft:d2kblogd2ksoft d2kblogeq1.0
d2ksoft:d2kblogd2ksoft d2kblogeq1.0.1
d2ksoft:d2kblogd2ksoft d2kblogeq1.0.2
d2ksoft:d2kblogd2ksoft d2kblogeq1.0.3

CPE	Name	Operator	Version
d2ksoft:d2kblog	d2ksoft d2kblog	eq	1.0
d2ksoft:d2kblog	d2ksoft d2kblog	eq	1.0.1
d2ksoft:d2kblog	d2ksoft d2kblog	eq	1.0.2
d2ksoft:d2kblog	d2ksoft d2kblog	eq	1.0.3

References

secunia.com/advisories/19177

securityreason.com/securityalert/559

www.osvdb.org/23771

www.securityfocus.com/archive/1/427103/100/0/threaded

www.securityfocus.com/bid/17035

www.vupen.com/english/advisories/2006/0896

exchange.xforce.ibmcloud.com/vulnerabilities/25214

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

JSON

Related for CVE-2006-1122

nvd1 prion1 cvelist1