CVE-2006-5064

{"id": "CVE-2006-5064", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": true}]}, "published": "2006-09-28T00:07:00.000", "references": [{"url": "http://securitytracker.com/id?1017258", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/31367", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/31368", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/31369", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/20202", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017258", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/31367", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/31368", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/31369", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/20202", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php, or the (3) uid parameter in user.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BirdBlog 1.4 y anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s del (1) par\u00e1metro entryid en comment.php, (2) el par\u00e1metro de p\u00e1gina en index.php, p (3) el par\u00e1metro uid en user.php. NOTA: el origen de esta informaci\u00f3n es desconocido; los detalles se obtuvieron de terceras fuentes de informaci\u00f3n."}], "lastModified": "2024-11-21T00:17:43.400", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:birdblog:birdblog:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFE95DA3-47CF-4756-935E-8F4A6CA995EE"}, {"criteria": "cpe:2.3:a:birdblog:birdblog:1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F25C8F90-AA95-4466-8A2B-6D4E3A9B912F"}, {"criteria": "cpe:2.3:a:birdblog:birdblog:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6A97221-1BEC-4E51-A20C-2CE83CFA5A23"}, {"criteria": "cpe:2.3:a:birdblog:birdblog:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B00115B8-4876-45DB-B99A-219BCC49680B"}, {"criteria": "cpe:2.3:a:birdblog:birdblog:1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "524DBD93-0778-4C52-87B6-060284092958"}, {"criteria": "cpe:2.3:a:birdblog:birdblog:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75A0BD22-C568-4259-9933-B6A505A22B12"}, {"criteria": "cpe:2.3:a:birdblog:birdblog:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1B24132-D1AA-44AF-8BE0-24FFF9118BCE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}