CVE-2006-3031

{"id": "CVE-2006-3031", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-06-15T10:02:00.000", "references": [{"url": "http://pridels0.blogspot.com/2006/06/fipscms-v45-xss-vuln.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/20617", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2293", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27076", "source": "cve@mitre.org"}, {"url": "http://pridels0.blogspot.com/2006/06/fipscms-v45-xss-vuln.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/20617", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/2293", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27076", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) w, (2) phcat, (3) dayid, and (4) calw parameters."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades XSS en index.asp en fipsCMS v4.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarias a trav\u00e9s de los par\u00e1metros (1) w, (2) phcat, (3) dayid y (4) calw."}], "lastModified": "2024-11-21T00:12:39.520", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fipsasp:fipscms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACE65BDB-6A1C-4D52-B1B4-D07EBBAAAE63", "versionEndIncluding": "4.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}