CVE-2006-3320

LOW 2.6CVE-2006-3320 · Published 30/06/2006 · updated 16/06/2026

In short

CVE-2006-3320 is a LOW (CVSS 2.6) vulnerability affecting sitebar (sitebar).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sitebar sitebar	`= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 3.3.7≤ 3.3.8`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

References

kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html · Exploit
secunia.com/advisories/20841 · Vendor Advisory
secunia.com/advisories/21248
securityreason.com/securityalert/1174
teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt
debian.org/security/2006/dsa-1130
osvdb.org/26869
securityfocus.com/archive/1/438464/100/0/threaded
securityfocus.com/archive/1/482499/100/0/threaded
securityfocus.com/bid/18680 · Exploit
securityfocus.com/bid/26126
vupen.com/english/advisories/2006/2568
exchange.xforce.ibmcloud.com/vulnerabilities/27421

More vulnerabilities in sitebar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free