Lucene search
MitreCVE-2006-6978HistoryFeb 08, 2007 - 5:28 p.m.
CVE-2006-6978
2007-02-0817:28:00
CWE-79
mitre
web.nvd.nist.gov
27
cve
2006
6978
xss
vulnerability
fckeditor
remote attackers
javascript
uri
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0.002
Percentile
64.6%
Cross-site scripting (XSS) vulnerability in the “Basic Toolbar Selection” in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the (1) href or (2) onmouseover attribute of the A HTML tag.
Affected configurations
Node
fckeditorfckeditor
Related
nvd
nvd
CVE-2006-6978
2007-02-08 17:28:00
cvelist
cvelist
CVE-2006-6978
2007-02-08 17:00:00
securityvulns
securityvulns
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.1
Confidence
High
EPSS
0.002
Percentile
64.6%
Related for CVE-2006-6978