Unrated severityNVD Advisory· Published Jun 30, 2006· Updated Apr 16, 2026
CVE-2006-3320
CVE-2006-3320
Description
Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.
Affected products
7cpe:2.3:a:sitebar:sitebar:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sitebar:sitebar:*:*:*:*:*:*:*:*range: <=3.3.8
- cpe:2.3:a:sitebar:sitebar:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:sitebar:sitebar:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:sitebar:sitebar:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:sitebar:sitebar:3.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:sitebar:sitebar:3.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:sitebar:sitebar:3.3.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.htmlnvdExploit
- www.securityfocus.com/bid/18680nvdExploit
- secunia.com/advisories/20841nvdVendor Advisory
- secunia.com/advisories/21248nvd
- securityreason.com/securityalert/1174nvd
- teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txtnvd
- www.debian.org/security/2006/dsa-1130nvd
- www.osvdb.org/26869nvd
- www.securityfocus.com/archive/1/438464/100/0/threadednvd
- www.securityfocus.com/archive/1/482499/100/0/threadednvd
- www.securityfocus.com/bid/26126nvd
- www.vupen.com/english/advisories/2006/2568nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27421nvd
News mentions
0No linked articles in our index yet.