medium4.3Public exploit code
CVE-2006-2269
Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScri…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyBloggie 2.1.2/2.1.3 - BBCode IMG Tag HTML Injection2006-05-06 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mywebland | Mybloggie | Versions 2.1.2, 2.1.3, 2.1.3_beta |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/857
- http://www.securityfocus.com/archive/1/433126/100/0/threaded
- http://www.securityfocus.com/bid/17865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26295
- http://securityreason.com/securityalert/857
- http://www.securityfocus.com/archive/1/433126/100/0/threaded
- http://www.securityfocus.com/bid/17865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26295