Unrated severityNVD Advisory· Published Jan 26, 2006· Updated Jun 16, 2026
CVE-2006-0443
CVE-2006-0443
Description
Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:cheesyblog:cheesyblog:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cheesyblog:cheesyblog:1.0:*:*:*:*:*:*:*
- (no CPE)range: 1.0
Patches
Vulnerability mechanics
References
8- evuln.com/vulns/49/summary.htmlnvdExploitVendor Advisory
- www.securityfocus.com/bid/16376nvdExploit
- secunia.com/advisories/18610nvd
- securityreason.com/securityalert/369nvd
- www.osvdb.org/22716nvd
- www.securityfocus.com/archive/1/423023/100/0/threadednvd
- www.vupen.com/english/advisories/2006/0326nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24292nvd
News mentions
0No linked articles in our index yet.