CVE-2006-2880

Published: Jun 7, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the (1) url and (2) author fields.

Affected (2)

Products: Pyblosxom: Pyblosxom

Pyblosxom

1 product

Pyblosxom

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Pyblosxom Pyblosxom	Up to 1.2.2
Pyblosxom Pyblosxom	Version 1.2.1

References (10)

http://secunia.com/advisories/20436

Source: cve@mitre.org

PatchVendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=422015

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/18292

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2153

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26945

Source: cve@mitre.org

http://secunia.com/advisories/20436