NVD

Id
64100  
Name
CVE-2006-5499  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-25  
Modified Date
2011-03-07  
Seq
2006-5499  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
334388 64100 CVE-2006-5499 20061019 Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities  View
334389 64100 CVE-2006-5499 1771  View
334390 64100 CVE-2006-5499 1017100  View
334391 64100 CVE-2006-5499 http://www.hardened-php.net/advisory_112006.136.html  View
334392 64100 CVE-2006-5499 http://www.s9y.org/forums/viewtopic.php?t=7356  View
334393 64100 CVE-2006-5499 20061019 Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities  View
334394 64100 CVE-2006-5499 20627  View
334395 64100 CVE-2006-5499 ADV-2006-4135  View
334396 64100 CVE-2006-5499 serendipity-admin-xss(29695)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61077 JVNDB-2006-003343 s9y におけるクロスサイトスクリプティングの脆弱性 Serendipity (s9y) は、メディアマネージャ管理ページに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5499 21601 CVE-2006-5499 64100 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003343.html 2006-10-25 2012-12-20 View