CVE-2006-2634

Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field.

Published Bycve@mitre.org

Published DateMay 30, 2006, 10:02

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://secunia.com/advisories/20307
http://securityreason.com/securityalert/967
http://www.securityfocus.com/archive/1/435145/100/0/threaded
http://www.securityfocus.com/bid/18130
http://www.vupen.com/english/advisories/2006/2026
http://yns.zaxaz.com/advisories/seditio.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/26713

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE