Lucene search

MitreCVE-2006-2678

HistoryMay 31, 2006 - 10:06 a.m.

CVE-2006-2678

2006-05-3110:06:00

mitre

web.nvd.nist.gov

cve-2006-2678

cross-site scripting

xss

pre news manager

remote attackers

web script

html

vulnerabilities

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, © email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.

Affected configurations

Nvd

Node

pre_projectspre_news_managerMatch1.0

VendorProductVersionCPE
pre_projectspre_news_manager1.0cpe:2.3:a:pre_projects:pre_news_manager:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pre_projects	pre_news_manager	1.0	cpe:2.3:a:pre_projects:pre_news_manager:1.0:::::::*

References

secunia.com/advisories/20284

securityreason.com/securityalert/996

www.osvdb.org/26066

www.osvdb.org/26067

www.osvdb.org/26068

www.osvdb.org/26069

www.osvdb.org/26070

www.osvdb.org/26071

www.osvdb.org/26072

www.securityfocus.com/archive/1/435020/100/0/threaded

www.securityfocus.com/bid/18333

www.vupen.com/english/advisories/2006/1990

exchange.xforce.ibmcloud.com/vulnerabilities/26692

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON

Related for CVE-2006-2678