Lucene search

MitreCVE-2006-1889

HistoryApr 20, 2006 - 10:02 a.m.

CVE-2006-1889

2006-04-2010:02:00

mitre

web.nvd.nist.gov

cve-2006-1889

xss

web script injection

html injection

nils asmussen

boardsolution

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the “Search for” item (keyword parameter).

Affected configurations

Nvd

Node

script-solution.deboardsolutionRange≤1.12

VendorProductVersionCPE
script-solution.deboardsolution*cpe:2.3:a:script-solution.de:boardsolution:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
script-solution.de	boardsolution	*	cpe:2.3:a:script-solution.de:boardsolution::::::::

References

secunia.com/advisories/19654

securityreason.com/securityalert/718

securityreason.com/securityalert/766

securitytracker.com/id?1015948

www.securityfocus.com/archive/1/431072/100/0/threaded

www.securityfocus.com/bid/17549

www.vupen.com/english/advisories/2006/1413

exchange.xforce.ibmcloud.com/vulnerabilities/25805

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Related for CVE-2006-1889