CVE-2006-0239 - CVE House
Back to Database
Status published Medium CVE-2006-0239

Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0239

Credits & Attribution

No credits recorded in the NVD database.

References

More from 8pixel.net

View All →
CVE-2007-4055
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote...
High 7.5
CVE-2006-6192
Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0...
High 7.5
CVE-2006-6191
SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and...
High 7.5
CVE-2006-4592
Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3...
High 7.5
CVE-2006-4300
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier...
High 7.5

Affected Vendor

Affected Software

simple blog
Vulnerable Versions:
2.1

Timeline

Official Publish: January 18th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.