CVE-2006-0473

Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://attrition.org/pipermail/vim/2006-January/000520.html
http://evuln.com/vulns/51/
http://evuln.com/vulns/51/summary.html	Exploit Vendor Advisory
http://secunia.com/advisories/18628	Vendor Advisory
http://securityreason.com/securityalert/378
http://www.osvdb.org/22753
http://www.securityfocus.com/archive/1/423167/100/0/threaded
http://www.securityfocus.com/bid/16395	Exploit
http://www.vupen.com/english/advisories/2006/0349
https://exchange.xforce.ibmcloud.com/vulnerabilities/24310

Configurations

Configuration 1 (hide)

cpe:2.3:a:my_little_homepage:my_little_weblog:2004-04-20:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-01-31 11:03

Updated : 2024-02-04 16:52

NVD link : CVE-2006-0473

Mitre link : CVE-2006-0473

CVE.ORG link : CVE-2006-0473

JSON object : View

Products Affected

my_little_homepage

my_little_weblog

CWE

NVD-CWE-Other

{"id": "CVE-2006-0473", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-01-31T11:03:00.000", "references": [{"url": "http://attrition.org/pipermail/vim/2006-January/000520.html", "source": "cve@mitre.org"}, {"url": "http://evuln.com/vulns/51/", "source": "cve@mitre.org"}, {"url": "http://evuln.com/vulns/51/summary.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/18628", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/378", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/22753", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/423167/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16395", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0349", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24310", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags."}], "lastModified": "2018-10-19T15:45:00.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:my_little_homepage:my_little_weblog:2004-04-20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D70E77BE-97D8-4323-82F8-6713A0109651"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}