Vulnerabilities > CVE-2006-2307 - HTML Injection vulnerability in Website Baker Website Baker 2.5.2/2.6/2.6.1
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
website-baker
Summary
Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |
References
- http://secunia.com/advisories/20081
- http://securityreason.com/securityalert/889
- http://www.securityfocus.com/archive/1/433130/100/0/threaded
- http://www.securityfocus.com/archive/1/434714/100/0/threaded
- http://www.securityfocus.com/bid/17868
- http://www.vupen.com/english/advisories/2006/1840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26326