CVE-2006-1205: Mywebland Mybloggie

Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php.

Affected products

• Mywebland Mybloggie: version 2.1.2 only; version 2.1.3 only; version 2.1.3_beta only

Published 2006-03-14. Last modified 2026-06-16.