CVE-2006-0210 - Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows

CVE-2006-0210

Summary

Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page.

References

http://secunia.com/advisories/18445
http://www.interspire.com/forum/showthread.php?p=29606
http://www.osvdb.org/22377
http://www.securityfocus.com/archive/1/421740/100/0/threaded
http://www.securityfocus.com/bid/16214
http://www.vupen.com/english/advisories/2006/0175
https://exchange.xforce.ibmcloud.com/vulnerabilities/24112

Vulnerable Configurations

cpe:2.3:a:interspire:trackpoint_nx:*:*:*:*:*:*:*:*
cpe:2.3:a:interspire:trackpoint_nx:*:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 19-10-2018 - 15:43)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	16214
bugtraq	20060112 Interspire TrackPoint NX XSS Vulnerability
confirm	http://www.interspire.com/forum/showthread.php?p=29606
osvdb	22377
secunia	18445
vupen	ADV-2006-0175
xf	trackpointnx-login-xss(24112)

Last major update

19-10-2018 - 15:43

Published

14-01-2006 - 01:03

Last modified

19-10-2018 - 15:43