Lucene search
HistoryJul 31, 2006 - 9:04 p.m.
CVE-2006-3927
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.065
Percentile
93.7%
Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter.
Affected configurations
Node
php_pro_bidphp_pro_bidMatch5.24
| Vendor | Product | Version | CPE |
|---|---|---|---|
| php_pro_bid | php_pro_bid | 5.24 | cpe:2.3:a:php_pro_bid:php_pro_bid:5.24:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-3927
2006-07-31 21:00:00
exploitdb
exploitdb
cve
cve
CVE-2006-3927
2006-07-31 21:04:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.065
Percentile
93.7%
Related for NVD:CVE-2006-3927