Lucene search

MitreCVE-2006-6271

HistoryDec 04, 2006 - 11:28 a.m.

CVE-2006-6271

2006-12-0411:28:00

mitre

web.nvd.nist.gov

cve

2006

6271

xss

phpoll

remote attackers

web script

html

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in PHPOLL 0.96 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) index.php, (2) info.php; and (3) index.php, (4) votanti.php, (5) risultati_config.php, (6) modifica_band.php, (7) band_editor.php, and (8) config_editor.php in admin/.

Affected configurations

Nvd

Node

phpollphpollMatch0.96

VendorProductVersionCPE
phpollphpoll0.96cpe:2.3:a:phpoll:phpoll:0.96:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpoll	phpoll	0.96	cpe:2.3:a:phpoll:phpoll:0.96:::::::*

References

securityreason.com/securityalert/1960

www.securityfocus.com/archive/1/452093/100/200/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/30426

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON

Related for CVE-2006-6271