CVE-2006-6951 - Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the page parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the page parameter

Published Jan 23, 2007

6.8

MEDIUM

CVSS 2.0

EPSS 1.83%

Description

Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://archives.neohapsis.com/archives/bugtraq/2006-11/0274.html
mailing-listx_refsource_BUGTRAQExploit
http://securityreason.com/securityalert/2173
third-party-advisoryx_refsource_SREASON
http://www.attrition.org/pipermail/vim/2007-January/001250.html
mailing-listx_refsource_VIM
http://www.securityfocus.com/bid/21128
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6934
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30333
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2006-11/0274.html		mailing-listx_refsource_BUGTRAQExploit
http://securityreason.com/securityalert/2173		third-party-advisoryx_refsource_SREASON
http://www.attrition.org/pipermail/vim/2007-January/001250.html		mailing-listx_refsource_VIM
http://www.securityfocus.com/bid/21128		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6934		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30333		vdb-entryx_refsource_XF