Vulnerability Description
Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| My Little Homepage | My Little Weblog | 2004-04-20 |
References
- http://attrition.org/pipermail/vim/2006-January/000520.html
- http://evuln.com/vulns/51/
- http://evuln.com/vulns/51/summary.htmlExploitVendor Advisory
- http://secunia.com/advisories/18628Vendor Advisory
- http://securityreason.com/securityalert/378
- http://www.osvdb.org/22753
- http://www.securityfocus.com/archive/1/423167/100/0/threaded
- http://www.securityfocus.com/bid/16395Exploit
- http://www.vupen.com/english/advisories/2006/0349
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24310
- http://attrition.org/pipermail/vim/2006-January/000520.html
- http://evuln.com/vulns/51/
- http://evuln.com/vulns/51/summary.htmlExploitVendor Advisory
- http://secunia.com/advisories/18628Vendor Advisory
- http://securityreason.com/securityalert/378
FAQ
What is CVE-2006-0473?
CVE-2006-0473 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javasc...
How severe is CVE-2006-0473?
CVE-2006-0473 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-0473?
Check the references section above for vendor advisories and patch information. Affected products include: My Little Homepage My Little Weblog.