Lucene search

[email protected]NVD:CVE-2006-0593

HistoryFeb 08, 2006 - 1:02 a.m.

CVE-2006-0593

2006-02-0801:02:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.

Affected configurations

Nvd

Node

php_fusionphp_fusionMatch6.00.100

php_fusionphp_fusionMatch6.00.101

php_fusionphp_fusionMatch6.00.102

php_fusionphp_fusionMatch6.00.103

php_fusionphp_fusionMatch6.00.104

php_fusionphp_fusionMatch6.00.105

php_fusionphp_fusionMatch6.00.106

php_fusionphp_fusionMatch6.00.107

php_fusionphp_fusionMatch6.00.108

php_fusionphp_fusionMatch6.00.109

php_fusionphp_fusionMatch6.00.110

php_fusionphp_fusionMatch6.00.200

php_fusionphp_fusionMatch6.00.204

php_fusionphp_fusionMatch6.00.205

php_fusionphp_fusionMatch6.00.206

php_fusionphp_fusionMatch6.00.207

php_fusionphp_fusionMatch6.00.300

php_fusionphp_fusionMatch6.00.303

VendorProductVersionCPE
php_fusionphp_fusion6.00.100cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.101cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.102cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.103cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.104cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.105cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.106cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.107cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.108cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*
php_fusionphp_fusion6.00.109cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
php_fusion	php_fusion	6.00.100	cpe:2.3:a:php_fusion:php_fusion:6.00.100:::::::*
php_fusion	php_fusion	6.00.101	cpe:2.3:a:php_fusion:php_fusion:6.00.101:::::::*
php_fusion	php_fusion	6.00.102	cpe:2.3:a:php_fusion:php_fusion:6.00.102:::::::*
php_fusion	php_fusion	6.00.103	cpe:2.3:a:php_fusion:php_fusion:6.00.103:::::::*
php_fusion	php_fusion	6.00.104	cpe:2.3:a:php_fusion:php_fusion:6.00.104:::::::*
php_fusion	php_fusion	6.00.105	cpe:2.3:a:php_fusion:php_fusion:6.00.105:::::::*
php_fusion	php_fusion	6.00.106	cpe:2.3:a:php_fusion:php_fusion:6.00.106:::::::*
php_fusion	php_fusion	6.00.107	cpe:2.3:a:php_fusion:php_fusion:6.00.107:::::::*
php_fusion	php_fusion	6.00.108	cpe:2.3:a:php_fusion:php_fusion:6.00.108:::::::*
php_fusion	php_fusion	6.00.109	cpe:2.3:a:php_fusion:php_fusion:6.00.109:::::::*

Rows per page:

1-10 of 181

References

secunia.com/advisories/18949

www.osvdb.org/22980

www.osvdb.org/22981

www.php-fusion.co.uk/downloads.php?cat_id=3

www.php-fusion.co.uk/news.php?readmore=307

www.securityfocus.com/bid/16548

www.vupen.com/english/advisories/2006/0463

exchange.xforce.ibmcloud.com/vulnerabilities/24548

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Related for NVD:CVE-2006-0593

prion1 cvelist1 cve1