Vulnerability Description
Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.
CVSS Score
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Scriptme | Sme Blog Host | All versions |
| Scriptme | Sme Gb Host | 1.21 |
References
- http://evuln.com/vulns/65/summary.htmlVendor Advisory
- http://secunia.com/advisories/18786Vendor Advisory
- http://securityreason.com/securityalert/447
- http://www.securityfocus.com/bid/16585
- http://www.vupen.com/english/advisories/2006/0504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24543
- http://evuln.com/vulns/65/summary.htmlVendor Advisory
- http://secunia.com/advisories/18786Vendor Advisory
- http://securityreason.com/securityalert/447
- http://www.securityfocus.com/bid/16585
- http://www.vupen.com/english/advisories/2006/0504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24543
FAQ
What is CVE-2006-0661?
CVE-2006-0661 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.
How severe is CVE-2006-0661?
CVE-2006-0661 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-0661?
Check the references section above for vendor advisories and patch information. Affected products include: Scriptme Sme Blog Host, Scriptme Sme Gb Host.