CVE-2006-3769

{"id": "CVE-2006-3769", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-24T12:19:00.000", "references": [{"url": "http://secunia.com/advisories/21145", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/1267", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016548", "source": "cve@mitre.org"}, {"url": "http://www.majorsecurity.de/advisory/major_rls22.txt", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/27413", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/27414", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/440652/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/440889/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19098", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2914", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27880", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pass and (2) pass2 parameters in (a) add.php or the (3) id parameter in (b) members/index.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Top XL 1.1 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de los par\u00e1metros (1) pass y (2) pass2 parameters en (a) add.php o el par\u00e1metro (3) id en (b) members/index.php."}], "lastModified": "2018-10-17T21:30:00.717", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:top_xl:top_xl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1AD0F9B-21D2-49D9-ABCA-E0B5E7E8F884", "versionEndIncluding": "1.1"}, {"criteria": "cpe:2.3:a:top_xl:top_xl:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEE9507C-0F47-477A-9F03-6EADC0A0E2D4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Successful exploitation requires that register_globals is enabled."}