admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 09:11:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2006/CVE-2006-54xx/CVE-2006-5453.json
René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

225 lines
7.9 KiB
JSON
Raw Blame History

{
"id": "CVE-2006-5453",
"sourceIdentifier": "cve@mitre.org",
"published": "2006-10-23T17:07:00.000",
"lastModified": "2018-10-17T21:43:00.173",
"vulnStatus": "Modified",
"evaluatorSolution": "This vulnerability is addressed in the following product releases:\r\nMozilla, Bugzilla, 2.18.6\r\nMozilla, Bugzilla, 2.20.3\r\nMozilla, Bugzilla, 2.22.1\r\nMozilla, Bugzilla, 2.23.3",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Bug<illa 2.18.x anteriores a 2.18.6, 2.20.x anteriores a 2.20.3, 2.22.x anteriores a 2.22.1, y 2.23.x anteriores a 2.23.3 permiten a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elecci\u00f3n mediante (1) cabeceras de p\u00e1gina usando las etiquetas HTML H1, H2, H3 en global/header.html.tmpl, (2) campos de descripci\u00f3n de determinados objetos en varias secuencias de comandos cgi de edici\u00f3n, y (3) el par\u00e1metro id en showdependencygraph.cgi."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 3.5
},
"baseSeverity": "LOW",
"exploitabilityScore": 6.8,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
"matchCriteriaId": "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
"matchCriteriaId": "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
"matchCriteriaId": "4869A709-AF79-49BD-A7D2-D48A8D79A085"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
"matchCriteriaId": "EAC72143-27C3-498F-AFAB-98AE043C0545"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BE5E8E72-D493-460D-B5A0-F90C291398A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
"matchCriteriaId": "04885D31-09F3-455F-A1A9-815E182ABCF9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
"matchCriteriaId": "92BCD546-2A50-4F43-935C-B68459EE894E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C535BAB7-6146-440B-ADBD-51007585CFC8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "A749C7AB-6F60-469C-BD95-759205DDA345"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
"matchCriteriaId": "196B7CD8-D721-4CFB-B126-78758128E900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
"matchCriteriaId": "F2969731-8256-431B-9356-4BC873D98F6D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*",
"matchCriteriaId": "02846865-D124-4C72-85C8-59A7C6F43E2E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*",
"matchCriteriaId": "99B59422-ED6E-4F82-8D0C-091058D1C438"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F658844A-6253-4A18-8A5D-1E818BE7A367"
}
]
}
]
}
],
"references": [
{
"url": "http://security.gentoo.org/glsa/glsa-200611-04.xml",
"source": "cve@mitre.org"
},
{
"url": "http://securityreason.com/securityalert/1760",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1017063",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www.bugzilla.org/security/2.18.5/",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2006/dsa-1208",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/448777/100/100/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/20538",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/4035",
"source": "cve@mitre.org"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=206037",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=330555",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=355728",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29610",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29619",
"source": "cve@mitre.org"
}
]
}
Reference in New Issue View Git Blame Copy Permalink