Lucene search

MitreCVE-2006-1878

HistoryApr 20, 2006 - 10:02 a.m.

CVE-2006-1878

2006-04-2010:02:00

mitre

web.nvd.nist.gov

cve-2006-1878

cross-site scripting

xss

phpfaber topsites

web security

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected configurations

Nvd

Node

phpfabertopsitesMatch3

VendorProductVersionCPE
phpfabertopsites3cpe:2.3:a:phpfaber:topsites:3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpfaber	topsites	3	cpe:2.3:a:phpfaber:topsites:3:::::::*

References

secunia.com/advisories/19652

securityreason.com/securityalert/719

securityreason.com/securityalert/760

securitytracker.com/id?1015945

www.securityfocus.com/archive/1/431073/100/0/threaded

www.securityfocus.com/bid/17542

www.vupen.com/english/advisories/2006/1394

exchange.xforce.ibmcloud.com/vulnerabilities/25804

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Related for CVE-2006-1878