CVE

Id
20194  
CVE No.
CVE-2006-4090  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "From: part of the comment post," probably involving the nickname parameter to previewcomment.php.  
Phase
Assigned (20060810)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187052 20194 CVE-2006-4090 BUGTRAQ:20060808 BlogHoster v2.2 Post Comment Html Injection  View
187053 20194 CVE-2006-4090 URL:http://www.securityfocus.com/archive/1/archive/1/442706/100/0/threaded  View
187054 20194 CVE-2006-4090 BID:19457  View
187055 20194 CVE-2006-4090 URL:http://www.securityfocus.com/bid/19457  View
187056 20194 CVE-2006-4090 VUPEN:ADV-2006-3236  View
187057 20194 CVE-2006-4090 URL:http://www.vupen.com/english/advisories/2006/3236  View
187058 20194 CVE-2006-4090 OSVDB:27886  View
187059 20194 CVE-2006-4090 URL:http://www.osvdb.org/27886  View
187060 20194 CVE-2006-4090 SECUNIA:21420  View
187061 20194 CVE-2006-4090 URL:http://secunia.com/advisories/21420  View
187062 20194 CVE-2006-4090 SREASON:1359  View
187063 20194 CVE-2006-4090 URL:http://securityreason.com/securityalert/1359  View
187064 20194 CVE-2006-4090 XF:bloghoster-previewcomment-xss(28304)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60747 JVNDB-2006-003013 Simpliciti Locked Browser における許可されていない操作を実行される脆弱性 Simpliciti Locked Browser は、Internet Explorer 環境内でユーザの操作を適切に制限しないため、許可されていない操作を実行される脆弱性が存在します。 CVE-2006-4092 20194 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003013.html  View