PT-2006-3821 · Particle · Particle Links

Published 2006-06-08 · Updated 2018-10-18 · CVE-2006-2903

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Particle Links version 1.2.2

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the username parameter in the "admin.php" endpoint.

Recommendations For Particle Links version 1.2.2, avoid using the username parameter in the admin.php endpoint until the issue is resolved. Consider temporarily restricting access to the admin.php endpoint to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-2903

Affected Products

Particle Links

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-2903 · Security Note
• http://secunia.com/advisories/20491 · Vendor Advisory
• http://securityfocus.com/archive/1/436112/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/2169 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26957 · Note
• http://securityfocus.com/bid/18344 · Note