CVE-2006-3555

{"id": "CVE-2006-3555", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-13T00:05:00.000", "references": [{"url": "http://php-fusion.co.uk/news.php", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/20904", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/1224", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/438938/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/18787", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2655", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27537", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) avatar or (2) forum image attachment that has a .gif or .jpg extension, and begins with a GIF header followed by JavaScript code, which is executed by Internet Explorer."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en submit.php de PHP-Fusion before 6.01.3 permiten a atacantes remotos inyectar web script o HTML de su elecci\u00f3n usando edit_profile.php para enviar im\u00e1genes adjuntas de (1) avatar o (2) forum que tienen extension .gif o .jpg, y comenzando con una cabecera GIF seguida de c\u00f3digo JavaScript, el cual es ejecutado por Internet Explorer."}], "lastModified": "2018-10-18T16:47:57.627", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81D8A288-20D3-42A2-BF19-14417D9063F9"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.100:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61EB6101-6BD0-4D6A-B681-7607B9424977"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.101:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D2AB1FF-B81B-4F19-9192-1E1CB66516D2"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5D4A233-7466-4F44-8468-779AA6A60850"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.103:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29821D4F-1EF2-4DA0-8CAB-67700D0B1A13"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.104:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD1DCE7B-E049-4FA0-A972-D39BCE79E1C3"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.105:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0F2384D-1E17-4DA8-A797-7E4729C2720F"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E92E863F-C72B-428E-A134-2CA5CA7058B5"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.106:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C21F2030-F535-49A4-8E6E-FD1CBE689AFE"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFC61337-9477-46AC-AA5E-7722F594BCAE"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.0.107:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B06B0846-7C58-44D0-AAF9-E3CAA4050EBC"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.108:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6716EE68-D01C-4C5B-ACA5-30E58B834C4A"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECBE45DB-64DA-4EC5-9DF0-749D533E7510"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.200:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A59B4A30-B3F1-4200-844E-E3F7EEA91214"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B24DACA-1F61-4AD6-9074-F330EFB28B92"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.205:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2252C51-1FA4-469B-B241-8EDB1D3DFB70"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5335762A-EA49-48D3-8A0C-0C031FECBC91"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.207:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25A8E77C-4687-4A3E-8112-52717E885C19"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.300:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49CDAEAF-9E2E-42F4-B7D7-EF121CC5F978"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D15B4762-66F2-4277-A975-00401C78F381"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA03A905-10E9-4EF5-B6C0-739ADEB16705"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E8CD847-F478-4DC1-92A8-A0DB3CBE3BBE"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.307:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A3E1E0C-2F23-4608-89BA-AE6CD467B4E1"}, {"criteria": "cpe:2.3:a:php_fusion:php_fusion:6.01.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F4C5FD7-18A4-43CF-8A71-439A785DCF5D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}