Lucene search
MitreCVE-2006-3189HistoryJun 23, 2006 - 12:02 a.m.
CVE-2006-3189
2006-06-2300:02:00
mitre
web.nvd.nist.gov
24
cve-2006-3189
xss
vulnerability
hotplug cms 1.0
administration
tblcontent
login1.php
remote attackers
web script
html
nvd
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.005
Percentile
77.2%
Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Affected configurations
Node
hotplug_cmshotplug_cmsMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hotplug_cms | hotplug_cms | 1.0 | cpe:2.3:a:hotplug_cms:hotplug_cms:1.0:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
HotPlug CMS 1.0 - 'Login1.php' Cross-Site Scripting
2006-06-15 00:00:00
cvelist
cvelist
CVE-2006-3189
2006-06-23 00:00:00
nvd
nvd
CVE-2006-3189
2006-06-23 00:02:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.005
Percentile
77.2%
Related for CVE-2006-3189