CVE-2006-3258

Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters.

CVSS v2.0 2.6 LOW

2.6^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/20774	Vendor Advisory
http://securitytracker.com/id?1016368
http://www.securityfocus.com/bid/18617
http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html
http://www.vupen.com/english/advisories/2006/2506
https://exchange.xforce.ibmcloud.com/vulnerabilities/27302

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:bnbt:easytracker::::::::
	cpe:2.3:a:bnbt:trinedit::::::::

Information

Published : 2006-06-27 14:05

Updated : 2017-07-19 18:32

NVD link : CVE-2006-3258

Mitre link : CVE-2006-3258

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

bnbt

easytracker
trinedit

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/20774", "name": "20774", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1016368", "name": "1016368", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/18617", "name": "18617", "tags": [], "refsource": "BID"}, {"url": "http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html", "name": "http://pridels0.blogspot.com/2006/06/bnbt-trinedit-vuln.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.vupen.com/english/advisories/2006/2506", "name": "ADV-2006-2506", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27302", "name": "bnbt-trinedit-index-xss(27302)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-3258", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2006-06-27T21:05Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:bnbt:easytracker:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "7.7_r3_2004-10-27"}, {"cpe23Uri": "cpe:2.3:a:bnbt:trinedit:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "7.7_r3_2004-10-27"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:32Z"}