JVNDB-2006-000636

Loudblog cross-site scripting vulnerability

Loudblog, an open source content management system used for podcasting, etc., contains a cross-site scripting vulnerability.

Base Metrics: 2.6 (Low) [IPA Score]

• Access Vector: Network
• Access Complexity: High
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

loudblog.de

• Loudblog 0.44 and earlier

An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly condust session hijacking.

loudblog.de

• Loudblog Forum : Loudblog 0.5 Release Notes

1. CVE-2006-3820

1. JVN : JVN#92975133
2. National Vulnerability Database (NVD) : CVE-2006-3820
3. Secunia Advisory : SA21098
4. SecurityFocus : 19082
5. ISS X-Force Database : 27849
6. FrSIRT Advisories : FrSIRT/ADV-2006-2901

[2008/05/21]
  Web page published