CVE-2006-0473

Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.

• http://attrition.org/pipermail/vim/2006-January/000520.html
• http://evuln.com/vulns/51/
• http://evuln.com/vulns/51/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18628Vendor Advisory
• http://securityreason.com/securityalert/378
• http://www.osvdb.org/22753
• http://www.securityfocus.com/archive/1/423167/100/0/threaded
• http://www.securityfocus.com/bid/16395Exploit
• http://www.vupen.com/english/advisories/2006/0349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24310
• http://attrition.org/pipermail/vim/2006-January/000520.html
• http://evuln.com/vulns/51/
• http://evuln.com/vulns/51/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18628Vendor Advisory
• http://securityreason.com/securityalert/378
• http://www.osvdb.org/22753
• http://www.securityfocus.com/archive/1/423167/100/0/threaded
• http://www.securityfocus.com/bid/16395Exploit
• http://www.vupen.com/english/advisories/2006/0349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24310

Published

Jan 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0467Unspecified vulnerability in Pioneers (formerly gnocatan) be…
• CVE-2006-0468CommuniGate Pro Core Server before 5.0.7 allows remote attac…
• CVE-2006-0469Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, …
• CVE-2006-0470Cross-site scripting (XSS) vulnerability in search.php in My…
• CVE-2006-0471Cross-site scripting (XSS) vulnerability in the bbcode funct…
• CVE-2006-0472Cross-site scripting (XSS) vulnerability in guestbook.php in…
• CVE-2006-0474Multiple integer overflows in Shareaza 2.2.1.0 allow remote …
• CVE-2006-0475PHP-Ping 1.3 does not properly validate ping counts, which a…
• CVE-2006-0476Buffer overflow in Nullsoft Winamp 5.12 allows remote attack…
• CVE-2006-0477Buffer overflow in git-checkout-index in GIT before 1.1.5 al…
• CVE-2006-0478CRE Loaded 6.15 allows remote attackers to perform privilege…
• CVE-2006-0479pmwiki.php in PmWiki 2.1 beta 20, with register_globals enab…