Lucene search

MitreCVE-2006-6532

HistoryDec 14, 2006 - 1:28 a.m.

CVE-2006-6532

2006-12-1401:28:00

mitre

web.nvd.nist.gov

cve

2006

6532

vt-forum lite

xss

vulnerabilities

web script

html

remote attackers

injection

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.6

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) StrMsg or (2) Topic_ID parameter to (a) vf_info.asp, (b) vf_newtopic.asp, © vf_settings.asp, and (d) vf_replytopic.asp, different vectors than CVE-2006-6447. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

vt-forumvt-forum_liteRange≤1.3

VendorProductVersionCPE
vt-forumvt-forum_lite*cpe:2.3:a:vt-forum:vt-forum_lite:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vt-forum	vt-forum_lite	*	cpe:2.3:a:vt-forum:vt-forum_lite::::::::

References

www.vupen.com/english/advisories/2006/4850

exchange.xforce.ibmcloud.com/vulnerabilities/30725

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.6

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

Related for CVE-2006-6532