CVE-2006-1405

Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

Published Bycve@mitre.org

Published DateMar 28, 2006, 11:06

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

5.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://pridels0.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html
http://secunia.com/advisories/19399
http://www.osvdb.org/24120
http://www.securityfocus.com/bid/17254
http://www.vupen.com/english/advisories/2006/1097
https://exchange.xforce.ibmcloud.com/vulnerabilities/25452

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

5.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

NONE