CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-0101

MEDIUM
4.3
CVSS Severity Score
EPSS Score0.0620%
EPSS Percentile7.70th
Published2006年1月6日
Last Modified2026年4月16日

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p and (2) keyword parameters in (a) index.php and (b) search.php.

Affected Platforms (CPE)

📦
Sblog

Sblog

<= 0.7.1_build2005-12-02_beta

References & Advisories

🔗 http://osvdb.org/ref/22/22373-sblog.txt
🔗 http://www.osvdb.org/22373
🔗 http://www.osvdb.org/22374
🔗 http://www.vupen.com/english/advisories/2006/0041
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/23979
🔗 http://osvdb.org/ref/22/22373-sblog.txt
🔗 http://www.osvdb.org/22373
🔗 http://www.osvdb.org/22374

関連する脆弱性情報

CVE-2006-218910.0

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the...

CVE-2007-58187.6

Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitr...

CVE-2007-18017.5

Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary loc...

CVE-2006-11354.3

Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML v...