CVE-2006-0473
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
88.0%
Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| my_little_homepage:my_little_weblog | my little homepage my little weblog | eq | 2004-04-20 |
References
attrition.org/pipermail/vim/2006-January/000520.html
evuln.com/vulns/51/
evuln.com/vulns/51/summary.html
secunia.com/advisories/18628
securityreason.com/securityalert/378
www.osvdb.org/22753
www.securityfocus.com/archive/1/423167/100/0/threaded
www.securityfocus.com/bid/16395
www.vupen.com/english/advisories/2006/0349
exchange.xforce.ibmcloud.com/vulnerabilities/24310
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
88.0%