Lucene search

MitreCVE-2006-6815

HistoryDec 29, 2006 - 11:28 a.m.

CVE-2006-6815

2006-12-2911:28:00

mitre

web.nvd.nist.gov

cve

2006

6815

cross-site scripting

xss

dmxready secure login manager

web security

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

66.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/list.asp in the Local-Admin Panel.

Affected configurations

Nvd

Node

dmxreadydmxready_secure_login_managerMatch1.0

VendorProductVersionCPE
dmxreadydmxready_secure_login_manager1.0cpe:2.3:a:dmxready:dmxready_secure_login_manager:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dmxready	dmxready_secure_login_manager	1.0	cpe:2.3:a:dmxready:dmxready_secure_login_manager:1.0:::::::*

References

securitytracker.com/id?1017448

www.securityfocus.com/archive/1/455353/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/31157

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

66.0%

JSON

Related for CVE-2006-6815