Lucene search
HistoryJul 27, 2006 - 10:04 p.m.
CVE-2006-3903
cve-2006-3903
crlf injection
mybloggie
session hijacking
xss
nvd
6.6 Medium
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.009 Low
EPSS
Percentile
82.9%
CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mywebland:mybloggie | mywebland mybloggie | eq | 2.1.3_beta |
| mywebland:mybloggie | mywebland mybloggie | eq | 2.1.3 |
References
6.6 Medium
AI Score
Confidence
High
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.009 Low
EPSS
Percentile
82.9%
Related for CVE-2006-3903