CVE-2006-1404

🗓️ 28 Mar 2006 11:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

CVE-2006-1404: XSS vulnerabilities in bol.cgi in BlankOL 1.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2006-1404	28 Mar 200611:00	–	cvelist
Exploit DB	BlankOL 1.0 - 'Bol.cgi' Multiple Cross-Site Scripting Vulnerabilities	27 Mar 200600:00	–	exploitdb
EUVD	EUVD-2006-1408	7 Oct 202500:30	–	euvd
NVD	CVE-2006-1404	28 Mar 200611:06	–	nvd
Prion	Cross site scripting	28 Mar 200611:06	–	prion

NVD

Node

industrial_imagination blankolRange≤1

Source	Link
pridels0	www.pridels0.blogspot.com/2006/03/blankol-xss-vuln.html
osvdb	www.osvdb.org/24124
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/25488
securityfocus	www.securityfocus.com/bid/17265
secunia	www.secunia.com/advisories/19387
vupen	www.vupen.com/english/advisories/2006/1111

Parameter	Position	Path	Description	CWE
file	query param	/bol.cgi?file=[XSS]	Cross-site scripting vulnerability in bol.cgi via the file parameter.	CWE-79
function	query param	/bol.cgi?function=[XSS]	Cross-site scripting vulnerability in bol.cgi via the function parameter.	CWE-79

16 Jun 2026 22:22Current

5.8Medium risk

Vulners AI Score5.8

CVSS 25.8

EPSS0.0188

cve 2006 1404 xss vulnerabilities bol.cgi blankol 1.0 web script html remote attackers