CVE-2006-0782
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to...
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter.
- Record
CVE-2006-0782- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter.
- Record
CVE-2006-0782- Updated
- 2026-11-02
EUVDEUVD-2006-0788 No score
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter.
- Record
EUVD-2006-0788- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q4r6-mc36-rg96 No score
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to...
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter.
- Record
GHSA-q4r6-mc36-rg96- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0782 is a high vulnerability (CVSS 7.5) in Perlblog, published February 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.04%, the 87th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/426260/100/0/threaded
evuln.com/vulns/81/summary.html
securityreason.com/securityalert/508
exchange.xforce.ibmcloud.com/vulnerabilities/24692
secunia.com/advisories/18924
nvd.nist.gov/vuln/detail/CVE-2006-0782
github.com/advisories/GHSA-q4r6-mc36-rg96