CVE-2006-6148 - Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow r

CVE-2006-6148

Summary

Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the (1) lName, (2) lURL, (3) lImage, and (4) lDescription parameters. NOTE: some of these details are obtained from third party information.

References

Vulnerable Configurations

cpe:2.3:a:jiros:links_manager:1.0:*:*:*:*:*:*:*
cpe:2.3:a:jiros:links_manager:1.0:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 17-10-2018 - 21:46)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	21226
bugtraq	20061121 JiRos Links Manager[injection sql & xss permanent]
misc	http://www.frsirt.com/english/reference-2006-4664-1.php
sectrack	1017280
secunia	23063
sreason	1924
vupen	ADV-2006-4664
xf	jiroslinkmanager-submitlink-xss(30465)

Last major update

17-10-2018 - 21:46

Published

28-11-2006 - 23:28

Last modified

17-10-2018 - 21:46