Lucene search

K
cveMitreCVE-2006-1405
HistoryMar 28, 2006 - 11:06 a.m.

CVE-2006-1405

2006-03-2811:06:00
mitre
web.nvd.nist.gov
31
cve-2006-1405
xss
remote attackers
web script
html
search.aspx
sscms 2.1.0
security vulnerability

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.1%

Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

Affected configurations

Nvd
Node
sheer_vision_technologiessscmsRange2.1.0
VendorProductVersionCPE
sheer_vision_technologiessscms*cpe:2.3:a:sheer_vision_technologies:sscms:*:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.1%

Related for CVE-2006-1405