CVE-2006-2269

myWebland MyBloggie <= 2.1.3 - Cross-Site Scripting via BBCode img Tag

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2269. PoCs published by zerogue.

AI-analyzed exploit summary The provided text describes an HTML-injection vulnerability in MyBloggie, where user-supplied input is not properly sanitized, leading to potential XSS attacks. The example payload demonstrates a simple XSS vector using an [img] tag with JavaScript.

Description

Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.

Exploits (1)

exploitdb WRITEUP VERIFIED
by zerogue · textwebappsphp
https://www.exploit-db.com/exploits/27822

The provided text describes an HTML-injection vulnerability in MyBloggie, where user-supplied input is not properly sanitized, leading to potential XSS attacks. The example payload demonstrates a simple XSS vector using an [img] tag with JavaScript.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: MyBloggie (version not specified)
No auth needed
Prerequisites: Access to input fields in MyBloggie that are vulnerable to HTML injection
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17865
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/433126/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/857
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26295

Scores

EPSS 0.0171
EPSS Percentile 75.0%

Details

Status published
Products (3)
mywebland/mybloggie 2.1.2
mywebland/mybloggie 2.1.3
mywebland/mybloggie 2.1.3_beta
Published May 09, 2006
Tracked Since Feb 18, 2026