CVEvulnerability
CVE-2006-5975
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) URL, or (3) Comments field.
Affected configurations
• drumster blogme 3.0
References
- http://secunia.com/advisories/22902 Vendor Advisory
- http://securityreason.com/securityalert/1882 securityreason.com
- http://www.securityfocus.com/archive/1/451563/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21071 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30286 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2781 www.exploit-db.com
- http://secunia.com/advisories/22902 Vendor Advisory
- http://securityreason.com/securityalert/1882 securityreason.com
- http://www.securityfocus.com/archive/1/451563/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21071 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30286 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2781 www.exploit-db.com