Lucene search
HistoryOct 05, 2006 - 4:04 a.m.
CVE-2006-5146
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.8
Confidence
High
EPSS
0.022
Percentile
89.4%
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and © uss.php.
Affected configurations
Node
yblogyblog
Related
cve
cve
CVE-2006-5146
2006-10-05 04:04:00
cvelist
cvelist
CVE-2006-5146
2006-10-02 23:00:00
exploitdb
exploitdb
Yblog - 'funk.php' Cross-Site Scripting
2006-09-30 00:00:00
Yblog - 'uss.php' Cross-Site Scripting
2006-09-30 00:00:00
Yblog - 'tem.php' Cross-Site Scripting
2006-09-30 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.8
Confidence
High
EPSS
0.022
Percentile
89.4%
Related for NVD:CVE-2006-5146