CVE-2006-1077

Published: Mar 9, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter and (2) other unspecified parameters.

Affected (1)

Products: Evo Dev: Evoblog

Evo Dev

1 product

Evoblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Evo Dev Evoblog	All versions

References (10)

http://securityreason.com/securityalert/544

Source: cve@mitre.org

http://www.osvdb.org/23826

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/426826/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431869/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16983

Source: cve@mitre.org

http://securityreason.com/securityalert/544