Lucene search

MitreCVE-2006-1377

HistoryMar 24, 2006 - 2:02 a.m.

CVE-2006-1377

2006-03-2402:02:00

mitre

web.nvd.nist.gov

cve-2006-1377

cross-site scripting

xss

easymoblog

comoblog

img.php

i parameter

web vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON

Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter.

Affected configurations

Nvd

Node

comoblog_projectcomoblogMatch1.1

easymoblogeasymoblogMatch0.5.1

VendorProductVersionCPE
comoblog_projectcomoblog1.1cpe:2.3:a:comoblog_project:comoblog:1.1:*:*:*:*:*:*:*
easymoblogeasymoblog0.5.1cpe:2.3:a:easymoblog:easymoblog:0.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
comoblog_project	comoblog	1.1	cpe:2.3:a:comoblog_project:comoblog:1.1:::::::*
easymoblog	easymoblog	0.5.1	cpe:2.3:a:easymoblog:easymoblog:0.5.1:::::::*

References

secunia.com/advisories/19370

secunia.com/advisories/19379

securitytracker.com/id?1015824

www.kapda.ir/advisory-301.html

www.osvdb.org/24093

www.osvdb.org/24094

www.securityfocus.com/archive/1/428553/100/0/threaded

www.securityfocus.com/bid/17199

www.securityfocus.com/bid/17201

www.vupen.com/english/advisories/2006/1086

www.vupen.com/english/advisories/2006/1087

exchange.xforce.ibmcloud.com/vulnerabilities/25416

exchange.xforce.ibmcloud.com/vulnerabilities/25420

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON

Related for CVE-2006-1377