CVE-2006-1205
Description
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4Patches
Vulnerability mechanics
References
14- www.seclab.tuwien.ac.at/advisories/TUVSA-0603-002.txtnvdExploitVendor Advisory
- www.securityfocus.com/bid/17048nvdExploit
- www.osvdb.org/23973nvd
- www.osvdb.org/23974nvd
- www.osvdb.org/23975nvd
- www.osvdb.org/23986nvd
- www.osvdb.org/23987nvd
- www.osvdb.org/23988nvd
- www.osvdb.org/23989nvd
- www.osvdb.org/23990nvd
- www.osvdb.org/23991nvd
- www.osvdb.org/23992nvd
- www.securityfocus.com/archive/1/427182/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25134nvd
News mentions
0No linked articles in our index yet.