CVE-2006-3230

Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote attackers to inject arbitrary web script or HTML via the search parameter.

Published Bycve@mitre.org

Published DateJun 27, 2006, 10:05

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

2.6

Vector String

AV:N/AC:H/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://pridels0.blogspot.com/2006/06/azureus-2402-xss-vuln.html
http://secunia.com/advisories/20755
http://securitytracker.com/id?1016357
http://www.osvdb.org/26768
http://www.securityfocus.com/bid/18596
http://www.vupen.com/english/advisories/2006/2484
https://exchange.xforce.ibmcloud.com/vulnerabilities/27300

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

2.6

Vector String

AV:N/AC:H/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE