Lucene search
MitreCVE-2006-6357HistoryDec 07, 2006 - 1:28 a.m.
CVE-2006-6357
2006-12-0701:28:00
mitre
web.nvd.nist.gov
23
cve-2006-6357
xss
vulnerability
templates
phpnews
web script
html
remote attackers
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
73.3%
Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
Node
phpnewsphpnewsRange≤1.3.0
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
73.3%
Related for CVE-2006-6357