Vulnerability CVE-2006-0204
Published: 2006-01-13   Modified: 2012-02-12

Description:
Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain other fields in unspecified scripts.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Wordcircle Multiple SQL Injection & XSS Vulnerabilities
alex evuln com
13.01.2006

Type:

CWE-Other

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Wordcircle -> Wordcircle 

 References:
http://evuln.com/vulns/28/summary.html
http://securityreason.com/securityalert/345
http://www.securityfocus.com/archive/1/421746/100/0/threaded
http://www.securityfocus.com/bid/16227
http://www.vupen.com/english/advisories/2006/0185
https://exchange.xforce.ibmcloud.com/vulnerabilities/24106
Copyright 2024, cxsecurity.com

 

Back to Top