CVE-2006-2571

Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action.

Published Bycve@mitre.org

Published DateMay 24, 2006, 23:02

Affected Versions(1)

org.opencms:opencms-core(Maven)

Introduced6.0.0

Fixed6.0.4

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
org.opencms:opencms-core(Maven)	6.0.0	6.0.4	N/A

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

2.6

Vector String

AV:N/AC:H/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

2.6

Vector String

AV:N/AC:H/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE