Lucene search

[email protected]NVD:CVE-2006-5515

HistoryOct 26, 2006 - 4:07 p.m.

CVE-2006-5515

2006-10-2616:07:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface.

Affected configurations

Nvd

Node

phpadsnewphpadsnewRange≤2.0.8

phppgadsphppgadsRange≤2.0.8

VendorProductVersionCPE
phpadsnewphpadsnew*cpe:2.3:a:phpadsnew:phpadsnew:*:*:*:*:*:*:*:*
phppgadsphppgads*cpe:2.3:a:phppgads:phppgads:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpadsnew	phpadsnew	*	cpe:2.3:a:phpadsnew:phpadsnew::::::::
phppgads	phppgads	*	cpe:2.3:a:phppgads:phppgads::::::::

References

secunia.com/advisories/22526

secunia.com/advisories/22529

securityreason.com/securityalert/1777

sourceforge.net/project/shownotes.php?release_id=457774&group_id=11386

sourceforge.net/project/shownotes.php?release_id=457775&group_id=36679

www.securityfocus.com/archive/1/449484/100/0/threaded

www.vupen.com/english/advisories/2006/4147

www.vupen.com/english/advisories/2006/4148

exchange.xforce.ibmcloud.com/vulnerabilities/29766

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

Related for NVD:CVE-2006-5515

cvelist1 cve1