CVE-2006-0341

Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=full-disclosure&m=113777628702043&w=2
http://secunia.com/advisories/18551	Patch Vendor Advisory
http://www.osvdb.org/22677
http://www.securityfocus.com/bid/16330
http://www.vupen.com/english/advisories/2006/0284
https://exchange.xforce.ibmcloud.com/vulnerabilities/24256

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rockliffe:mailsite::::::::
	cpe:2.3:a:rockliffe:mailsite::::::::

History

No history.

Information

Published : 2006-01-06 05:00

Updated : 2017-07-20 01:29

NVD link : CVE-2006-0341

Mitre link : CVE-2006-0341

CVE.ORG link : CVE-2006-0341

JSON object : View

Products Affected

rockliffe

mailsite

CWE

NVD-CWE-Other

{"id": "CVE-2006-0341", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-01-06T05:00:00.000", "references": [{"url": "http://marc.info/?l=full-disclosure&m=113777628702043&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/18551", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22677", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16330", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0284", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24256", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string."}, {"lang": "es", "value": "Vulnerabilidad de XSS en WCONSOLE.DLL en Rockliffe MailSite 5.x y 6.1.22 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s de la cadena de consulta."}], "lastModified": "2017-07-20T01:29:40.520", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3F9D92C-D9F4-428B-B43B-491FD8EBA461", "versionEndIncluding": "6.1.22"}, {"criteria": "cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F727A82-6E93-4F6F-A771-704C9F5FFB77", "versionEndIncluding": "7.0.3.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}