CVE-2006-0562 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter.

Affected Software

Name	Vendor	Start Version	End Version
Pluggedout_blog	Pluggedout	1.9.9c (including)	1.9.9c (including)

References

http://attrition.org/pipermail/vim/2006-February/000530.html
http://hamid.ir/security/pluggedoutblog.txt
http://secunia.com/advisories/18726
http://securitytracker.com/id?1015586
http://www.osvdb.org/22927
http://www.securityfocus.com/archive/1/423948/100/0/threaded
http://www.vupen.com/english/advisories/2006/0440
https://exchange.xforce.ibmcloud.com/vulnerabilities/24482
http://attrition.org/pipermail/vim/2006-February/000530.html
http://hamid.ir/security/pluggedoutblog.txt
http://secunia.com/advisories/18726
http://securitytracker.com/id?1015586
http://www.osvdb.org/22927
http://www.securityfocus.com/archive/1/423948/100/0/threaded
http://www.vupen.com/english/advisories/2006/0440
https://exchange.xforce.ibmcloud.com/vulnerabilities/24482

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0562
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html