CVE-2006-5975

2006-11-2021:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) URL, or (3) Comments field.

References

secunia.com/advisories/22902

securityreason.com/securityalert/1882

www.securityfocus.com/archive/1/451563/100/0/threaded

www.securityfocus.com/bid/21071

exchange.xforce.ibmcloud.com/vulnerabilities/30286

www.exploit-db.com/exploits/2781