CVE-2006-1331

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/archive/1/428157
http://zone14.free.fr/advisories/1	Vendor Advisory
http://www.securityfocus.com/bid/17151
http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/25331
https://exchange.xforce.ibmcloud.com/vulnerabilities/25099

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:*

Information

Published : 2006-03-20 17:06

Updated : 2017-07-19 18:30

NVD link : CVE-2006-1331

Mitre link : CVE-2006-1331

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

phpoutsourcing

noahs_classifieds

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/archive/1/428157", "name": "20060320 Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://zone14.free.fr/advisories/1", "name": "http://zone14.free.fr/advisories/1", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/17151", "name": "17151", "tags": [], "refsource": "BID"}, {"url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html", "name": "20060308 Noah's Classifieds Multiple Cross-Site Scripting Vulnerabilities", "tags": [], "refsource": "FULLDISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25331", "name": "noahs-index-path-disclosure(25331)", "tags": [], "refsource": "XF"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25099", "name": "noahs-index-xss(25099)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-1331", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2006-03-21T01:06Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:phpoutsourcing:noahs_classifieds:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.3"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:30Z"}