CVE-2006-3320
Published Jun 30, 2006
Last updated 6 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.6
- Impact score
- 2.9
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sitebar:sitebar:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4B90410-C896-45C7-9E93-A2261B4F4AC0",
"versionEndIncluding": "3.3.8"
},
{
"criteria": "cpe:2.3:a:sitebar:sitebar:3.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44507F73-328C-433C-AD2B-E2F4293158E3"
},
{
"criteria": "cpe:2.3:a:sitebar:sitebar:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7854532-F8BB-4998-8EE9-45D863318C36"
},
{
"criteria": "cpe:2.3:a:sitebar:sitebar:3.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1190EDFB-7E34-4E5E-A10C-768B6A05FD04"
},
{
"criteria": "cpe:2.3:a:sitebar:sitebar:3.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D804D27-DBB4-4582-AA2F-2DE850B56EE6"
},
{
"criteria": "cpe:2.3:a:sitebar:sitebar:3.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B2E7C5B-32B7-42FF-B794-3229B36A99B8"
},
{
"criteria": "cpe:2.3:a:sitebar:sitebar:3.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40E14900-C476-4159-A437-24ADE92DFF9F"
}
],
"operator": "OR"
}
]
}
]