NVD

Id
61313  
Name
CVE-2006-2618  
Description
Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-05-25  
Modified Date
2008-09-05  
Seq
2006-2618  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316807 61313 CVE-2006-2618 955  View
316808 61313 CVE-2006-2618 20060523 AlstraSoft Web Host Directory v1.2  View
316809 61313 CVE-2006-2618 http://www.sitepoint.com/forums/showthread.php?t=311969  View
316810 61313 CVE-2006-2618 webhostdirectory-review-xss(26665)  View
316811 61313 CVE-2006-2618 hs-webhostdirectory-review-xss(26666)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61742 JVNDB-2006-004008 AlstraSoft Web Host Directory におけるクロスサイトスクリプティングの脆弱性 (1) AlstraSoft Web Host Directory、別名 (2) HyperStop WebHost Directory には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-2618 18720 CVE-2006-2618 61313 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-004008.html 2006-05-26 2014-03-11 View