CVE-2006-1377

Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter.

• http://secunia.com/advisories/19370
• http://secunia.com/advisories/19379
• http://securitytracker.com/id?1015824
• http://www.kapda.ir/advisory-301.htmlExploit, Vendor Advisory
• http://www.osvdb.org/24093
• http://www.osvdb.org/24094
• http://www.securityfocus.com/archive/1/428553/100/0/threaded
• http://www.securityfocus.com/bid/17199Exploit
• http://www.securityfocus.com/bid/17201Exploit
• http://www.vupen.com/english/advisories/2006/1086
• http://www.vupen.com/english/advisories/2006/1087
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25416
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25420
• http://secunia.com/advisories/19370
• http://secunia.com/advisories/19379
• http://securitytracker.com/id?1015824
• http://www.kapda.ir/advisory-301.htmlExploit, Vendor Advisory
• http://www.osvdb.org/24093
• http://www.osvdb.org/24094
• http://www.securityfocus.com/archive/1/428553/100/0/threaded
• http://www.securityfocus.com/bid/17199Exploit
• http://www.securityfocus.com/bid/17201Exploit
• http://www.vupen.com/english/advisories/2006/1086
• http://www.vupen.com/english/advisories/2006/1087
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25416
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25420

Published

Mar 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1371Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earli…
• CVE-2006-1372Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 a…
• CVE-2006-1373Cross-site scripting (XSS) vulnerability in status_image.php…
• CVE-2006-1374SQL injection vulnerability in viewStatement.php in AdMan 1.…
• CVE-2006-1375AdMan 1.0.20051221 and earlier allows remote attackers to ob…
• CVE-2006-1376The installation of Debian GNU/Linux 3.1r1 from the network …
• CVE-2006-1378PasswordSafe 3.0 beta, when running on Windows before XP, us…
• CVE-2006-1379Trend Micro PC-cillin Internet Security 2006 14.00.1485 and …
• CVE-2006-1380ISNTSmtp directory in Trend Micro InterScan Messaging Securi…
• CVE-2006-1381Trend Micro OfficeScan 5.5, and probably other versions befo…
• CVE-2006-1382PHP remote file inclusion vulnerability in impex/ImpExData.p…
• CVE-2006-1383Directory traversal vulnerability in Baby FTP Server (BabyFT…