CVE-2006-0473

Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-cf9c-9r7x-87wj

Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little...

References (20)

• http://attrition.org/pipermail/vim/2006-January/000520.html
• http://evuln.com/vulns/51/
• http://evuln.com/vulns/51/summary.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18628 Vendor Advisory
• http://securityreason.com/securityalert/378
• http://www.osvdb.org/22753
• http://www.securityfocus.com/archive/1/423167/100/0/threaded
• http://www.securityfocus.com/bid/16395 Exploit
• http://www.vupen.com/english/advisories/2006/0349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24310
• http://attrition.org/pipermail/vim/2006-January/000520.html
• http://evuln.com/vulns/51/
• http://evuln.com/vulns/51/summary.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18628 Vendor Advisory
• http://securityreason.com/securityalert/378