CVE-2006-1779

Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://retrogod.altervista.org/simplog_092_incl_xpl.html
http://secunia.com/advisories/19628	Vendor Advisory
http://www.securityfocus.com/bid/17493
http://www.osvdb.org/24562
http://securitytracker.com/id?1015904
http://www.vupen.com/english/advisories/2006/1332
https://exchange.xforce.ibmcloud.com/vulnerabilities/25778
https://www.exploit-db.com/exploits/1663
http://www.securityfocus.com/archive/1/430743/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*

Information

Published : 2006-04-13 03:02

Updated : 2018-10-18 09:36

NVD link : CVE-2006-1779

Mitre link : CVE-2006-1779

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

simplog

simplog

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://retrogod.altervista.org/simplog_092_incl_xpl.html", "name": "http://retrogod.altervista.org/simplog_092_incl_xpl.html", "tags": [], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/19628", "name": "19628", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/17493", "name": "17493", "tags": [], "refsource": "BID"}, {"url": "http://www.osvdb.org/24562", "name": "24562", "tags": [], "refsource": "OSVDB"}, {"url": "http://securitytracker.com/id?1015904", "name": "1015904", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2006/1332", "name": "ADV-2006-1332", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25778", "name": "simplog-login-xss(25778)", "tags": [], "refsource": "XF"}, {"url": "https://www.exploit-db.com/exploits/1663", "name": "1663", "tags": [], "refsource": "EXPLOIT-DB"}, {"url": "http://www.securityfocus.com/archive/1/430743/100/0/threaded", "name": "20060412 Simplog <=0.9.2 multiple vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-1779", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2006-04-13T10:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "0.9.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-18T16:36Z"}