CVE-2006-1779: XSS
Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1779?
The severity of CVE-2006-1779 is considered to be moderate due to the potential for cross-site scripting and the ability for attackers to inject malicious scripts.
How do I fix CVE-2006-1779?
To fix CVE-2006-1779, update to Simplog version 0.9.3 or later that addresses the vulnerability.
What software is affected by CVE-2006-1779?
CVE-2006-1779 affects Simplog versions 0.9.2 and earlier.
What kind of attack is possible with CVE-2006-1779?
CVE-2006-1779 allows attackers to perform cross-site scripting (XSS) attacks via the btag parameter in login.php.
Can CVE-2006-1779 lead to data theft?
Yes, CVE-2006-1779 can potentially lead to data theft as attackers can use XSS to steal user session cookies or other sensitive information.