Lucene search
HistoryJan 18, 2006 - 1:07 a.m.
CVE-2006-0239
cve-2006-0239
cross-site scripting
xss
simple blog 2.1
web security
remote attackers
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.8%
Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.
Affected configurations
Node
8pixel.netsimple_blogMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| 8pixel.net:simple_blog | 8pixel.net simple blog | eq | 2.1 |
Related
cvelist
cvelist
CVE-2006-0239
2006-01-18 01:00:00
prion
prion
Cross site scripting
2006-01-18 01:07:00
nvd
nvd
CVE-2006-0239
2006-01-18 01:07:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.8%
Related for CVE-2006-0239