CVE-2006-5146 Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b)....
MediumCVSS 6.8
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yblog | All versions | No fix listed |
References
- 1679 third-party-advisory
- 20061002 yblog: distributable product exploit mailing-list
- 20060930 Yblog => Cross Site Scripting mailing-list
- 20280 exploit vdb-entry
- yblog-multiple-xss(29291) vdb-entry