Unscored CVE-2006-3903 EUVD-2006-3897GHSA-3j9j-89rj-v28w

CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and…

Published Jul 27, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie.

References

20060517 HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection mailing-list
mybloggie-index-admin-crlf-injection(26484) vdb-entry
20060727 Re: HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection mailing-list
26557 vdb-entry
26558 vdb-entry
20060517 HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection mailing-list