Lucene search
MitreCVE-2006-5293HistoryOct 16, 2006 - 6:07 p.m.
CVE-2006-5293
2006-10-1618:07:00
mitre
web.nvd.nist.gov
20
xss
vulnerability
phpoutsourcing
noah's classifieds
security
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6
Confidence
High
EPSS
0.016
Percentile
87.5%
Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah’s Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter.
Affected configurations
Node
phpoutsourcingnoahs_classifiedsRange≤1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpoutsourcing | noahs_classifieds | * | cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:* |
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6
Confidence
High
EPSS
0.016
Percentile
87.5%
Related for CVE-2006-5293