VulnerabilityModified
CVE-2006-0661
Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.
MEDIUM 4.3EPSS 1.33%
Does this matter?
Lower severity and a low EPSS score (1.33%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.33% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- scriptme/sme blog host · scriptme/sme gb host
- Source
- cve@mitre.org
References
- http://evuln.com/vulns/65/summary.htmlVendor Advisory
- http://secunia.com/advisories/18786Vendor Advisory
- http://securityreason.com/securityalert/447
- http://www.securityfocus.com/bid/16585
- http://www.vupen.com/english/advisories/2006/0504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24543
- http://evuln.com/vulns/65/summary.htmlVendor Advisory
- http://secunia.com/advisories/18786Vendor Advisory
- http://securityreason.com/securityalert/447
- http://www.securityfocus.com/bid/16585
- http://www.vupen.com/english/advisories/2006/0504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24543
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.