CVE-2006-3514 | BDVDB-2026-18020 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the (1) name, (2) title, (3) news, (4) description, and (5) sitename parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/27630
http://www.vupen.com/english/advisories/2006/2710
http://www.securityfocus.com/archive/1/439440/100/0/threaded
http://secunia.com/advisories/20989
http://securityreason.com/securityalert/1202
http://www.securityfocus.com/bid/18909

Exploit#

No public exploit known

History#

Version 12006-07-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.