CVE-2006-6466

Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) key, (2) d, (3) l, or (4) v parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: CVE disputes the l vector because l is validated by ctype_alpha before use.

• http://www.vupen.com/english/advisories/2006/4823
• http://www.vupen.com/english/advisories/2006/4823

Published

Dec 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6460Yourfreeworld.com Short Url & Url Tracker Script allows remo…
• CVE-2006-6461tr1.php in Yourfreeworld Stylish Text Ads Script allows remo…
• CVE-2006-6462PHP remote file inclusion vulnerability in engine/oldnews.in…
• CVE-2006-6463Unrestricted file upload vulnerability in admin/add.php in M…
• CVE-2006-6464viewcart in Midicart accepts negative numbers in the Qty (qu…
• CVE-2006-6465Directory traversal vulnerability in WBmap.php in WikyBlog 1…
• CVE-2006-6467Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13…
• CVE-2006-6468Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13…
• CVE-2006-6469Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13…
• CVE-2006-6470The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before…
• CVE-2006-6471Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13…
• CVE-2006-6472The httpd.conf file in Xerox WorkCentre and WorkCentre Pro b…