CVE-2006-6032

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to inject arbitrary web script or…

published November 21, 2006

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter in add_block.php or (2) the entry parameter in index.php, different vectors than CVE-2005-1135. NOTE: this has been reported to affect 0.8, but as of 20061121, the most recent version is only 0.4.9.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01271 · 69.6th percentile
Published
2006-11-21T23:00Z
EPSS history
Timeline
  • 21 NOV 23:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to inject arbitrary web script or…
    cvelistv5