{"id": "CVE-2006-0239", "bulletinFamily": "NVD", "title": "CVE-2006-0239", "description": "Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.", "published": "2006-01-17T20:07:00", "modified": "2017-07-19T21:29:34", "cvss": {"score": 5.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-0239", "reporter": "NVD", "references": ["http://www.securityfocus.com/bid/16243", "http://www.hackerscenter.com/archive/view.asp?id=21926", "http://www.vupen.com/english/advisories/2006/0194", "https://exchange.xforce.ibmcloud.com/vulnerabilities/24154", "http://www.securityfocus.com/archive/1/archive/1/422102/100/0/threaded"], "cvelist": ["CVE-2006-0239"], "type": "cve", "lastseen": "2017-07-20T10:49:03", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:8pixel.net:simple_blog:2.1"], "cvelist": ["CVE-2006-0239"], "cvss": {"score": 5.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "description": "Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.", "edition": 1, "enchantments": {}, "hash": "c6d8d1e68f5549fc24ab5731007d85188ddbad77be4e76ef98960e73c65eed44", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "06f44a9515b34a1f780839329d10f8a1", "key": "modified"}, {"hash": "1ce88ebeeaab797775248997c10ffdfc", "key": "href"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "085a5ba0f05858dba04cb6c6be614a31", "key": "references"}, {"hash": "aa48a6bdcab91a600eca490863982fbd", "key": "cvss"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "8dde04a79d634291e1e1c4a4a8025b43", "key": "published"}, {"hash": "967097cb8a69119a4e63c60b9ea06444", "key": "title"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "24e267982a7bb3ffbfbc5dfc53338b77", "key": "description"}, {"hash": "8fdb2296cf37d397ebd848fc1726119d", "key": "cpe"}, {"hash": "129211a4c4a0edfacca595ee458d44e1", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-0239", "id": "CVE-2006-0239", "lastseen": "2016-09-03T06:22:27", "modified": "2011-03-07T21:29:38", "objectVersion": "1.2", "published": "2006-01-17T20:07:00", "references": ["http://www.securityfocus.com/bid/16243", "http://www.hackerscenter.com/archive/view.asp?id=21926", "http://xforce.iss.net/xforce/xfdb/24154", "http://www.vupen.com/english/advisories/2006/0194", "http://www.securityfocus.com/archive/1/archive/1/422102/100/0/threaded"], "reporter": "NVD", "scanner": [], "title": "CVE-2006-0239", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T06:22:27"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "8fdb2296cf37d397ebd848fc1726119d"}, {"key": "cvelist", "hash": "129211a4c4a0edfacca595ee458d44e1"}, {"key": "cvss", "hash": "aa48a6bdcab91a600eca490863982fbd"}, {"key": "description", "hash": "24e267982a7bb3ffbfbc5dfc53338b77"}, {"key": "href", "hash": "1ce88ebeeaab797775248997c10ffdfc"}, {"key": "modified", "hash": "ae4a07ced6083598e0aefba82e8b2cdf"}, {"key": "published", "hash": "8dde04a79d634291e1e1c4a4a8025b43"}, {"key": "references", "hash": "5c843107fd5c19f7c5ac4617fab661aa"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "967097cb8a69119a4e63c60b9ea06444"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "d89185e1d2cea02f6e1ac2e1d943701fcab88bd87a74e45726fa53df384a5dab", "viewCount": 0, "enchantments": {"vulnersScore": 4.3}, "objectVersion": "1.3", "cpe": ["cpe:/a:8pixel.net:simple_blog:2.1"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"result": {"osvdb": [{"id": "OSVDB:22448", "type": "osvdb", "title": "SimpleBlog comments.asp Comment Field XSS", "description": "## Vulnerability Description\nSimpleBlog contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the comment field upon submission to the comments.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nSimpleBlog contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the comment field upon submission to the comments.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.\n## References:\nVendor URL: http://www.8pixel.net/?pageID=2\n[Secunia Advisory ID:18488](https://secuniaresearch.flexerasoftware.com/advisories/18488/)\n[Related OSVDB ID: 22447](https://vulners.com/osvdb/OSVDB:22447)\nOther Advisory URL: http://www.hackerscenter.com/archive/view.asp?id=21926\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-01/0305.html\nFrSIRT Advisory: ADV-2006-0194\n[CVE-2006-0239](https://vulners.com/cve/CVE-2006-0239)\nBugtraq ID: 16243\n", "published": "2006-01-15T06:33:24", "cvss": {"score": 5.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:22448", "cvelist": ["CVE-2006-0239"], "lastseen": "2017-04-28T13:20:19"}]}}