CVE Feed

    Dashboard / CVE / CVE-2006-3320

    CVE-2006-3320

    Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

    Published:Jun 30, 2006
    Last Modified:Apr 16, 2026
    EPS:Jun 30, 2006
    EPSS Score:0.01357
    CVSS Score:2.6

    Affected Products

    Vendor
    Sitebar
    Product
    Sitebar

    Exploits

    http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.htmlhttp://www.securityfocus.com/bid/18680http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.htmlhttp://www.securityfocus.com/bid/18680

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-5693 (CVSS 6) — Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authent…
    CVE-2007-5694 (CVSS 6.8) — Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remot…
    CVE-2007-5695 (CVSS 6.4) — Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbit…
    CVE-2007-5692 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrar…
    CVE-2007-5491 (CVSS 9) — Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote au…
    CVE-2007-5492 (CVSS 4.6) — Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote …
    CVE-2007-2088 (CVSS 7.5) — Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to exec…

    References

    http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html
    http://secunia.com/advisories/20841
    http://secunia.com/advisories/21248
    http://securityreason.com/securityalert/1174
    http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup
    http://www.debian.org/security/2006/dsa-1130
    http://www.osvdb.org/26869
    http://www.securityfocus.com/archive/1/438464/100/0/threaded
    http://www.securityfocus.com/archive/1/482499/100/0/threaded
    http://www.securityfocus.com/bid/18680
    http://www.securityfocus.com/bid/26126
    http://www.vupen.com/english/advisories/2006/2568
    https://exchange.xforce.ibmcloud.com/vulnerabilities/27421
    http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html
    http://secunia.com/advisories/20841
    http://secunia.com/advisories/21248
    http://securityreason.com/securityalert/1174
    http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup
    http://www.debian.org/security/2006/dsa-1130
    http://www.osvdb.org/26869
    http://www.securityfocus.com/archive/1/438464/100/0/threaded
    http://www.securityfocus.com/archive/1/482499/100/0/threaded
    http://www.securityfocus.com/bid/18680
    http://www.securityfocus.com/bid/26126
    http://www.vupen.com/english/advisories/2006/2568
    https://exchange.xforce.ibmcloud.com/vulnerabilities/27421

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High