Lucene search

MitreCVE-2006-1835

HistoryApr 19, 2006 - 4:06 p.m.

CVE-2006-1835

2006-04-1916:06:00

mitre

web.nvd.nist.gov

cve-2006-1835

cross-site scripting

xss

calendarix

web script

html

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.

Affected configurations

Nvd

Node

vincent_horcalendarixMatch0.6.2005-08-30

vincent_horcalendarix_advancedMatch1.5.2005-05-01

VendorProductVersionCPE
vincent_horcalendarix0.6.2005-08-30cpe:2.3:a:vincent_hor:calendarix:0.6.2005-08-30:*:*:*:*:*:*:*
vincent_horcalendarix_advanced1.5.2005-05-01cpe:2.3:a:vincent_hor:calendarix_advanced:1.5.2005-05-01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vincent_hor	calendarix	0.6.2005-08-30	cpe:2.3:a:vincent_hor:calendarix:0.6.2005-08-30:::::::*
vincent_hor	calendarix_advanced	1.5.2005-05-01	cpe:2.3:a:vincent_hor:calendarix_advanced:1.5.2005-05-01:::::::*

References

secunia.com/advisories/19710

securityreason.com/securityalert/727

securitytracker.com/id?1015954

www.securityfocus.com/archive/1/431122/100/0/threaded

www.securityfocus.com/bid/17562

www.vupen.com/english/advisories/2006/1376

exchange.xforce.ibmcloud.com/vulnerabilities/25874

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Related for CVE-2006-1835