Vulnerabilities > CVE-2006-5064 - Unspecified vulnerability in Birdblog

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
birdblog
exploit available
NVD
Published: 2006-09-28
Updated: 2024-11-21

Summary

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php, or the (3) uid parameter in user.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Vulnerable Configurations

Part Description Count
Application
Birdblog
7

Exploit-Db

  • descriptionBirdBlog 1.x user.php uid Parameter XSS. CVE-2006-5064. Webapps exploit for php platform
    idEDB-ID:28669
    last seen2016-02-03
    modified2006-09-25
    published2006-09-25
    reporterRoot3r_H3ll
    sourcehttps://www.exploit-db.com/download/28669/
    titleBirdBlog 1.x user.php uid Parameter XSS
  • descriptionBirdBlog 1.x comment.php entryid Parameter XSS. CVE-2006-5064. Webapps exploit for php platform
    idEDB-ID:28667
    last seen2016-02-03
    modified2006-09-25
    published2006-09-25
    reporterRoot3r_H3ll
    sourcehttps://www.exploit-db.com/download/28667/
    titleBirdBlog 1.x comment.php entryid Parameter XSS
  • descriptionBirdBlog 1.x index.php page Parameter XSS. CVE-2006-5064. Webapps exploit for php platform
    idEDB-ID:28668
    last seen2016-02-03
    modified2006-09-25
    published2006-09-25
    reporterRoot3r_H3ll
    sourcehttps://www.exploit-db.com/download/28668/
    titleBirdBlog 1.x index.php page Parameter XSS

References