CVE-2006-2895
Published Jun 7, 2006
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.6
- Impact score
- 2.9
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3EAF847-B64C-4C12-8BF2-631F61B0618E"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09EF3827-9C87-4043-B10A-1D6AFCB64F57"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08B1EDE8-940E-47C1-9CDA-C6BBE1BB9A11"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4554900-E09D-4D9D-99D4-FE5FDB3CDE78"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93EB0312-A147-4307-9491-46AEC2EC727C"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48929086-E08E-472D-A503-4CA803A840D5"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.5_r14348:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62B4D1E6-9EFE-4608-9A97-8119822A9F3B"
},
{
"criteria": "cpe:2.3:a:mediawiki:mediawiki:1.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A98675FD-C9EA-49AB-BA9F-2CF5898203C7"
}
],
"operator": "OR"
}
]
}
]