CyberSec.Space Logo
Back to CVE Browser

CVE-2006-0562

MEDIUM
4.3
CVSS Severity Score
EPSS Score0.0950%
EPSS Percentile23.60th
PublishedFeb 6, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter.

Affected Platforms (CPE)

📦
Pluggedout

Pluggedout Blog

= 1.9.9c

References & Advisories

🔗 http://attrition.org/pipermail/vim/2006-February/000530.html
🔗 http://hamid.ir/security/pluggedoutblog.txt
🔗 http://secunia.com/advisories/18726
🔗 http://securitytracker.com/id?1015586
🔗 http://www.osvdb.org/22927
🔗 http://www.securityfocus.com/archive/1/423948/100/0/threaded
🔗 http://www.vupen.com/english/advisories/2006/0440
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/24482

Related Vulnerabilities

CVE-2005-40547.5

SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL com...

CVE-2006-05637.5

SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via th...

CVE-2006-502510.0

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack ve...

CVE-2006-623510.0

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to ...