Lucene search

MitreCVE-2006-2184

HistoryMay 04, 2006 - 12:38 p.m.

CVE-2006-2184

2006-05-0412:38:00

mitre

web.nvd.nist.gov

cve-2006-2184

cross-site scripting

xss

search.php

phpkb knowledge base

vulnerability

web script

html

remote attackers

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that “We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues.”

Affected configurations

Nvd

Node

chadha_software_technologiesphpkb_knowledge_baseRange≤1.5

VendorProductVersionCPE
chadha_software_technologiesphpkb_knowledge_base*cpe:2.3:a:chadha_software_technologies:phpkb_knowledge_base:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
chadha_software_technologies	phpkb_knowledge_base	*	cpe:2.3:a:chadha_software_technologies:phpkb_knowledge_base::::::::

References

d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html

secunia.com/advisories/19913

www.attrition.org/pipermail/vim/2006-May/000753.html

www.attrition.org/pipermail/vim/2006-May/000775.html

www.vupen.com/english/advisories/2006/1628

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Related for CVE-2006-2184