ID CVE-2006-1418
Summary Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter. A new version of School Management System was released on May 28, 2006.
References
Vulnerable Configurations
  • cpe:2.3:a:caloris_planitia_technologies:e-school_management_system:*:*:*:*:*:*:*:*
    cpe:2.3:a:caloris_planitia_technologies:e-school_management_system:*:*:*:*:*:*:*:*
CVSS
Base: 2.6 (as of 20-07-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:H/Au:N/C:N/I:P/A:N
refmap via4
bid 17257
misc http://pridels0.blogspot.com/2006/03/e-school-management-system-xss-vuln.html
osvdb 24128
secunia 19381
vupen ADV-2006-1095
xf eschoolmanagementsystem-default-xss(25469)
Last major update 20-07-2017 - 01:30
Published 28-03-2006 - 20:02
Last modified 20-07-2017 - 01:30
Back to Top