Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-1791


Vulnerability Score 7.5 7.5
CVE Id CVE-2006-1791
Last Modified 05 Sep 2008 05:02:51
Published 14 Apr 2006 07:02:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE



Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers to read or include arbitrary local files via the request parameter. NOTE: this issue can also produce resultant XSS when the associated include statement fails.

Vulnerable Systems


  • Jl Webworks Quickblogger 1.4


BUGTRAQ - 20060412 QuickBlogger v1.4 Cross-Site Scripting

SECUNIA - 15942

XF - quickblogger-acc-xss(25795)

BUGTRAQ - 20060414 Re: QuickBlogger v1.4 Cross-Site Scripting

Last Updated: 27 May 2016 10:42:10