Lucene search

K
cveMitreCVE-2006-1583
HistoryApr 02, 2006 - 9:04 p.m.

CVE-2006-1583

2006-04-0221:04:00
mitre
web.nvd.nist.gov
26
cve
2006
1583
xss
vulnerability
warcraft iii
replay parser
php
web script
html

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

68.3%

Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: post-disclosure analysis by CVE suggests that the “page” parameter is not used in this product, and “id” might be the affected parameter.

Affected configurations

Nvd
Node
juliusz_julas_gonerawarcraft_iii_replay_parser_phpMatch1.8c
VendorProductVersionCPE
juliusz_julas_gonerawarcraft_iii_replay_parser_php1.8ccpe:2.3:a:juliusz_julas_gonera:warcraft_iii_replay_parser_php:1.8c:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

68.3%

Related for CVE-2006-1583