NVD

Id
63472  
Name
CVE-2006-4856  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) url parameters; (4) certain content parameters in the preview method; or (5) the q parameter in (a) sitesearch.do.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-19  
Modified Date
2011-03-07  
Seq
2006-4856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330841 63472 CVE-2006-4856 http://opensource.atlassian.com/projects/roller/browse/ROL-1196  View
330842 63472 CVE-2006-4856 http://people.apache.org/~snoopdave/roller-2.3.1-rc1/apache-roller-src-2.3.1-rc1-incubating.tar.gz  View
330843 63472 CVE-2006-4856 1597  View
330844 63472 CVE-2006-4856 VU#366900  View
330845 63472 CVE-2006-4856 20060915 Roller Weblogger XSS vulnerability  View
330846 63472 CVE-2006-4856 20045  View
330847 63472 CVE-2006-4856 ADV-2006-3667  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60922 JVNDB-2006-003188 Roller WebLogger におけるクロスサイトスクリプティングの脆弱性 Roller WebLogger には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4856 20958 CVE-2006-4856 63472 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003188.html 2006-09-19 2012-12-20 View