Lucene search

K
cve[email protected]CVE-2006-6778
HistoryDec 28, 2006 - 12:28 a.m.

CVE-2006-6778

2006-12-2800:28:00
web.nvd.nist.gov
20
xss
vulnerability
timberwolf 1.2.2
remote attackers
web script
html
nid parameter

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

High

0.065 Low

EPSS

Percentile

93.8%

Cross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the nid parameter.

Affected configurations

NVD
Node
timberwolftimberwolfMatch1.2.2
CPENameOperatorVersion
timberwolf:timberwolftimberwolfeq1.2.2

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

High

0.065 Low

EPSS

Percentile

93.8%

Related for CVE-2006-6778