CVE-2006-4016 - Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and un

CVE-2006-4016

Summary

Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter.

References

http://secunia.com/advisories/21344
http://securityreason.com/securityalert/1337
http://securitytracker.com/id?1016636
http://www.majorsecurity.de/index_en2.php?major_rls=major_rls27
http://www.securityfocus.com/archive/1/442100
http://www.securityfocus.com/bid/19329
http://www.vupen.com/english/advisories/2006/3151

Vulnerable Configurations

cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*
cpe:2.3:a:toenda_software_development:toendacms:*:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 08-03-2011 - 02:40)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	19329
bugtraq	20060803 [MajorSecurity Advisory #27]ToendaCMS - Cross Site Scripting Issue
misc	http://www.majorsecurity.de/index_en2.php?major_rls=major_rls27
sectrack	1016636
secunia	21344
sreason	1337
vupen	ADV-2006-3151

Last major update

08-03-2011 - 02:40

Published

07-08-2006 - 19:04

Last modified

08-03-2011 - 02:40