Lucene search

MitreCVE-2006-3428

HistoryJul 07, 2006 - 12:05 a.m.

CVE-2006-3428

2006-07-0700:05:00

mitre

web.nvd.nist.gov

cve-2006-3428

cross-site scripting

xss

tigertom ttcalc 1.0

security vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON

Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php.

Affected configurations

Nvd

Node

tigertom_scriptsttcalc_scriptMatch1.0

VendorProductVersionCPE
tigertom_scriptsttcalc_script1.0cpe:2.3:a:tigertom_scripts:ttcalc_script:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tigertom_scripts	ttcalc_script	1.0	cpe:2.3:a:tigertom_scripts:ttcalc_script:1.0:::::::*

References

secunia.com/advisories/20952

www.osvdb.org/27035

www.osvdb.org/27036

www.securityfocus.com/archive/1/439208/100/0/threaded

www.securityfocus.com/bid/18844

www.vupen.com/english/advisories/2006/2692

exchange.xforce.ibmcloud.com/vulnerabilities/27563

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.006

Percentile

78.9%

JSON

Related for CVE-2006-3428