{"api_version":"1","generated_at":"2026-07-23T09:16:44+00:00","cve":"CVE-2006-4883","urls":{"html":"https://cve.report/CVE-2006-4883","api":"https://cve.report/api/cve/CVE-2006-4883.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4883","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4883"},"summary":{"title":"CVE-2006-4883","description":"Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-19 21:07:00","updated_at":"2018-10-17 21:40:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://securitytracker.com/id?1016876","name":"1016876","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - BizDirectory Input Validation Holes Permit Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3691","name":"ADV-2006-3691","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1611","name":"1611","refsource":"SREASON","tags":[],"title":"SecurityReason - BizDirectory all version xss","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20081","name":"20081","refsource":"BID","tags":[],"title":"IDevSpot BizDirectory Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29002","name":"bizdirectory-feed-xss(29002)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446223/100/0/threaded","name":"20060916 BizDirectory all version xss","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21911","name":"21911","refsource":"SECUNIA","tags":[],"title":"BizDirectory \"message\" Cross-Site Scripting Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4883","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4883","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4883","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"idevspot","cpe5":"bizdirectory","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4883","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"idevspot","cpe5":"bizdirectory","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4883","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"21911","refsource":"SECUNIA","url":"http://secunia.com/advisories/21911"},{"name":"1611","refsource":"SREASON","url":"http://securityreason.com/securityalert/1611"},{"name":"1016876","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016876"},{"name":"ADV-2006-3691","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3691"},{"name":"20060916 BizDirectory all version xss","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446223/100/0/threaded"},{"name":"20081","refsource":"BID","url":"http://www.securityfocus.com/bid/20081"},{"name":"bizdirectory-feed-xss(29002)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29002"}]}},"nvd":{"publishedDate":"2006-09-19 21:07:00","lastModifiedDate":"2018-10-17 21:40:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:idevspot:bizdirectory:*:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4883","Ordinal":"20223","Title":"CVE-2006-4883","CVE":"CVE-2006-4883","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4883","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4883","Ordinal":"2","NoteData":"2006-09-19","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4883","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}