Vulnerabilities > CVE-2006-2820 - HTML Injection vulnerability in Hotwebscripts Weblog Oggi 1.0

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

hotwebscripts

NVD

Published: 2006-06-05

Updated: 2018-10-18

Summary

Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element.

Vulnerable Configurations

Part	Description	Count
Application	Hotwebscripts Hotwebscripts Weblog Oggi 1.0	1

References

http://secunia.com/advisories/20447
http://securityreason.com/securityalert/1028
http://www.securityfocus.com/archive/1/435713/100/0/threaded
http://www.securityfocus.com/bid/18240
https://exchange.xforce.ibmcloud.com/vulnerabilities/26928