1. CVE-Search
  2. CVE-2006-3558
ID CVE-2006-3558
Summary Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judul_artikel parameter in teman.php and (2) the title of an article sent to admin, which is displayed when unauthenticated users visit index.php.
References
Vulnerable Configurations
  • cpe:2.3:a:arif_supriyanto:auracms:1.62:*:*:*:*:*:*:*
    cpe:2.3:a:arif_supriyanto:auracms:1.62:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 18-10-2018 - 16:47)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 18867
bugtraq 20060706 lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]>===<[XSS vulnerable]&[bug]
misc http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt
osvdb
  • 28200
  • 28202
sreason 1226
xf
  • auracms-teman-xss(27703)
  • auracms-title-xss(27704)
Last major update 18-10-2018 - 16:47
Published 13-07-2006 - 00:05
Last modified 18-10-2018 - 16:47
Back to Top