CVE-2006-6153

Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://s-a-p.ca/index.php?page=OurAdvisories&id=47	URL Repurposed
http://www.securityfocus.com/bid/21190	Exploit
http://securitytracker.com/id?1017259
http://secunia.com/advisories/22987	Vendor Advisory
http://securityreason.com/securityalert/1926
https://exchange.xforce.ibmcloud.com/vulnerabilities/30446
http://www.securityfocus.com/archive/1/452179/100/100/threaded

Configurations

Configuration 1 (hide)

cpe:2.3:a:vspin.net:classified_system:2004:*:*:*:*:*:*:*

History

14 Feb 2024, 01:17

Type	Values Removed	Values Added
References	~~(MISC) http://s-a-p.ca/index.php?page=OurAdvisories&id=47 -~~	(MISC) http://s-a-p.ca/index.php?page=OurAdvisories&id=47 - URL Repurposed

Information

Published : 2006-11-28 23:28

Updated : 2024-02-14 01:17

NVD link : CVE-2006-6153

Mitre link : CVE-2006-6153

JSON object : View

Products Affected

vspin.net

classified_system

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://s-a-p.ca/index.php?page=OurAdvisories&id=47", "name": "http://s-a-p.ca/index.php?page=OurAdvisories&id=47", "tags": ["URL Repurposed"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/21190", "name": "21190", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1017259", "name": "1017259", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/22987", "name": "22987", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securityreason.com/securityalert/1926", "name": "1926", "tags": [], "refsource": "SREASON"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30446", "name": "classifiedsystem-catsearch-xss(30446)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/452179/100/100/threaded", "name": "20061119 Classified System [injection sql]", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-6153", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-11-28T23:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:vspin.net:classified_system:2004:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2024-02-14T01:17Z"}