CVE-2006-1404

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-28 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file or (2) function parameter.

Affected products

Industrial Imagination Blankol: through 1

References

http://pridels0.blogspot.com/2006/03/blankol-xss-vuln.html
http://secunia.com/advisories/19387
http://www.osvdb.org/24124
http://www.securityfocus.com/bid/17265
http://www.vupen.com/english/advisories/2006/1111
https://exchange.xforce.ibmcloud.com/vulnerabilities/25488
http://pridels0.blogspot.com/2006/03/blankol-xss-vuln.html
http://secunia.com/advisories/19387
http://www.osvdb.org/24124
http://www.securityfocus.com/bid/17265
http://www.vupen.com/english/advisories/2006/1111
https://exchange.xforce.ibmcloud.com/vulnerabilities/25488

Get alerted when CVE-2006-1404 or the next vulnerability affects your stack