MEDIUM
Cross-site scripting (XSS) vulnerability in BBcode.pm in M
Published Feb 16, 2006
4.3
MEDIUMCVSS 2.0
EPSS 2.89%
Description
Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBcode tag.
Affected products
No data.
OR
- 1.0
- 1.2
- 1.3
- 1.4
- 1.5
- 1.6
- 1.21
- 1.22
- 1.23
- 1.31
- 1.51
- 1.52
- 1.61
- 1.62
- 1.63
- 1.64
- 1.03
- 1.04
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (15)
- http://evuln.com/vulns/79/summary.html x_refsource_MISCExploitPatchVendor Advisory
- http://evuln.com/vulns/80/summary.html x_refsource_CONFIRMExploitPatchVendor Advisory
- http://fuzzymonkey.net/forum/viewtopic.php?t=856 x_refsource_CONFIRMPatch
- http://menno.b10m.net/perl/HTML-BBCode/Changes x_refsource_CONFIRM
- http://menno.b10m.net/perl/dists/HTML-BBCode-1.05.tar.gz x_refsource_CONFIRM
- http://secunia.com/advisories/18905 third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
- http://secunia.com/advisories/18925 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://www.evuln.com/vulns/80/summary.html x_refsource_MISCExploitPatchVendor Advisory
- http://www.securityfocus.com/archive/1/425087/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/425113/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/16659 vdb-entryx_refsource_BIDExploitPatch
- http://www.vupen.com/english/advisories/2006/0614 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/0642 vdb-entryx_refsource_VUPEN
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0742 Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24668 vdb-entryx_refsource_XF
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 16, 2006
Updated Aug 7, 2024
Reserved Feb 16, 2006
Link CVE-2006-0735
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2006-0742 Assigner mitre
Published Feb 16, 2006
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2006-0742