ID CVE-2006-6256
Summary Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a folder name.
References
Vulnerable Configurations
  • cpe:2.3:a:alternc:alternc:*:*:*:*:*:*:*:*
    cpe:2.3:a:alternc:alternc:*:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 17-10-2018 - 21:47)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 21355
bugtraq 20061128 Multiple Vulnerabilities in AlternC version 0.9.5
confirm
misc http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt
secunia 23144
sreason 1965
vupen ADV-2006-4851
xf alternc-multiple-xss(30625)
Last major update 17-10-2018 - 21:47
Published 04-12-2006 - 11:28
Last modified 17-10-2018 - 21:47
Back to Top