CVE-2006-7190

Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1	Patch
http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1
http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1	Patch
http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1

Configurations

Configuration 1 (hide)

cpe:2.3:a:web-app.net:webapp:0.9.9.6:*:*:*:*:*:*:*

History

21 Nov 2024, 00:24

Type	Values Removed	Values Added
References	~~() http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 - Patch~~	() http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 - Patch
References	~~() http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1 -~~	() http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1 -

Information

Published : 2007-04-03 00:19

Updated : 2024-11-21 00:24

NVD link : CVE-2006-7190

Mitre link : CVE-2006-7190

CVE.ORG link : CVE-2006-7190

JSON object : View

Products Affected

web-app.net

webapp

CWE

NVD-CWE-Other

{"id": "CVE-2006-7190", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-04-03T00:19:00.000", "references": [{"url": "http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1", "source": "cve@mitre.org"}, {"url": "http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc."}, {"lang": "es", "value": "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en cgi-bin/user-lib/topics.pl en web-app.net WebAPP anterior 20060515 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de vectores no especificados en la funci\u00f3n viewnews, relacionado con el uso de doubbctopic en vez de doubbc."}], "lastModified": "2024-11-21T00:24:36.027", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:web-app.net:webapp:0.9.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D927790-D759-442A-8089-FAB2974F9AB1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}