CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0735

Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBcode tag.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.125

EPSS Ranking 93.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2006-0735

Fuzzymonkey » My Blog » Version: 1.0

cpe:2.3:a:fuzzymonkey:my_blog:1.0
Fuzzymonkey » My Blog » Version: 1.2

cpe:2.3:a:fuzzymonkey:my_blog:1.2
Fuzzymonkey » My Blog » Version: 1.21

cpe:2.3:a:fuzzymonkey:my_blog:1.21
Fuzzymonkey » My Blog » Version: 1.22

cpe:2.3:a:fuzzymonkey:my_blog:1.22
Fuzzymonkey » My Blog » Version: 1.23

cpe:2.3:a:fuzzymonkey:my_blog:1.23
Fuzzymonkey » My Blog » Version: 1.3

cpe:2.3:a:fuzzymonkey:my_blog:1.3
Fuzzymonkey » My Blog » Version: 1.31

cpe:2.3:a:fuzzymonkey:my_blog:1.31
Fuzzymonkey » My Blog » Version: 1.4

cpe:2.3:a:fuzzymonkey:my_blog:1.4
Fuzzymonkey » My Blog » Version: 1.5

cpe:2.3:a:fuzzymonkey:my_blog:1.5
Fuzzymonkey » My Blog » Version: 1.51

cpe:2.3:a:fuzzymonkey:my_blog:1.51
Fuzzymonkey » My Blog » Version: 1.52

cpe:2.3:a:fuzzymonkey:my_blog:1.52
Fuzzymonkey » My Blog » Version: 1.6

cpe:2.3:a:fuzzymonkey:my_blog:1.6
Fuzzymonkey » My Blog » Version: 1.61

cpe:2.3:a:fuzzymonkey:my_blog:1.61
Fuzzymonkey » My Blog » Version: 1.62

cpe:2.3:a:fuzzymonkey:my_blog:1.62
Fuzzymonkey » My Blog » Version: 1.63

cpe:2.3:a:fuzzymonkey:my_blog:1.63
Fuzzymonkey » My Blog » Version: 1.64

cpe:2.3:a:fuzzymonkey:my_blog:1.64
M Blom » Html-Bbcode » Version: 1.03

cpe:2.3:a:m_blom:html-bbcode:1.03
M Blom » Html-Bbcode » Version: 1.04

cpe:2.3:a:m_blom:html-bbcode:1.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0735

Products

Pricing

Contact Us