Lucene search

[email protected]CVE-2006-5799

HistoryNov 08, 2006 - 8:07 p.m.

CVE-2006-5799

2006-11-0820:07:00

[email protected]

web.nvd.nist.gov

cve-2006-5799

cross-site scripting

xss

remote code injection

xenis.creator cms

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.

Affected configurations

NVD

Node

xenisxenis.creator_cms

CPENameOperatorVersion
xenis:xenis.creator_cmsxenis xenis.creator cmseq*

CPE	Name	Operator	Version
xenis:xenis.creator_cms	xenis xenis.creator cms	eq	*

References

marc.info/?l=bugtraq&m=116266150514762&w=2

secunia.com/advisories/22716

securitytracker.com/id?1017162

www.majorsecurity.de/index_2.php?major_rls=major_rls31

www.securityfocus.com/bid/20908

www.vupen.com/english/advisories/2006/4470

exchange.xforce.ibmcloud.com/vulnerabilities/30019

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

Related for CVE-2006-5799

cvelist1 nvd1