Lucene search
MitreCVE-2006-2988HistoryJun 13, 2006 - 1:02 a.m.
CVE-2006-2988
2006-06-1301:02:00
mitre
web.nvd.nist.gov
31
cve-2006-2988
cross-site scripting
xss
vulnerability
chemical dictionary
dictionary.php
web script
html
browse action
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.006
Percentile
78.3%
Cross-site scripting (XSS) vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a browse action.
Affected configurations
Node
chemical_dictionarychemical_dictionary
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chemical_dictionary | chemical_dictionary | * | cpe:2.3:a:chemical_dictionary:chemical_dictionary:*:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.006
Percentile
78.3%
Related for CVE-2006-2988