CVE-2006-2965

Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the target parameter in index.php and (2) the "input box."

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/20490	Vendor Advisory
http://securityreason.com/securityalert/1071
http://www.securityfocus.com/archive/1/436113/100/0/threaded
http://www.vupen.com/english/advisories/2006/2168
https://exchange.xforce.ibmcloud.com/vulnerabilities/26954
http://secunia.com/advisories/20490	Vendor Advisory
http://securityreason.com/securityalert/1071
http://www.securityfocus.com/archive/1/436113/100/0/threaded
http://www.vupen.com/english/advisories/2006/2168
https://exchange.xforce.ibmcloud.com/vulnerabilities/26954

Configurations

Configuration 1 (hide)

cpe:2.3:a:particle_soft:particle_whois:1.0.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-06-12 20:06

Updated : 2025-04-03 01:03

NVD link : CVE-2006-2965

Mitre link : CVE-2006-2965

CVE.ORG link : CVE-2006-2965

JSON object : View

Products Affected

particle_soft

particle_whois

CWE

NVD-CWE-Other

{"id": "CVE-2006-2965", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-06-12T20:06:00.000", "references": [{"url": "http://secunia.com/advisories/20490", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/1071", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/436113/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2168", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26954", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/20490", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/1071", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/436113/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/2168", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26954", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the target parameter in index.php and (2) the \"input box.\""}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:particle_soft:particle_whois:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD9A904C-C580-43EA-AFAE-1940EDDF1ADA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}