Lucene search

K
cveMitreCVE-2006-5944
HistoryNov 17, 2006 - 12:07 a.m.

CVE-2006-5944

2006-11-1700:07:00
mitre
web.nvd.nist.gov
24
cve-2006-5944
cross-site scripting
xss
mginternet car site manager
csm
remote attackers
web script
html

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

High

EPSS

0.015

Percentile

86.9%

Cross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager (CSM) allows remote attackers to inject arbitrary web script or HTML via the s parameter.

Affected configurations

Nvd
Node
mginternetcar_site_manager
VendorProductVersionCPE
mginternetcar_site_manager*cpe:2.3:a:mginternet:car_site_manager:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

High

EPSS

0.015

Percentile

86.9%

Related for CVE-2006-5944