CVE-2006-3903: Mywebland Mybloggie

Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie.

Affected products

• Mywebland Mybloggie: version 2.1.3 only; version 2.1.3_beta only

Published 2006-07-27. Last modified 2026-06-16.