CVE-2006-2556 - Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR

CVE-2006-2556

Summary

Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx rebuilded), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

References

http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html
http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal
http://secunia.com/advisories/20128
http://www.osvdb.org/25578
http://www.vupen.com/english/advisories/2006/1838

Vulnerable Configurations

cpe:2.3:a:florian_amrhein:newsportal:0.36:*:*:*:*:*:*:*
cpe:2.3:a:florian_amrhein:newsportal:0.36:*:*:*:*:*:*:*

CVSS

Base:	5.8 (as of 08-03-2011 - 02:36)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:N

refmap via4

bugtraq	20060515 Newsportal: code injection vulnerability
confirm	http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal
osvdb	25578
secunia	20128
vupen	ADV-2006-1838

Last major update

08-03-2011 - 02:36

Published

24-05-2006 - 01:02

Last modified

08-03-2011 - 02:36