CVE-2006-1574

Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Published Bycve@mitre.org

Published DateApr 01, 2006, 00:04

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

5.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://secunia.com/advisories/19483
http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html
http://www.osvdb.org/24295
http://www.securityfocus.com/bid/17337
http://www.vupen.com/english/advisories/2006/1180
https://exchange.xforce.ibmcloud.com/vulnerabilities/25574

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

5.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

NONE