CVE-2006-3320

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows...

2.6 LowFix available

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

Exploit likelihood

2.07%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 2.6

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

Record: CVE-2006-3320
CVSS 2.0: 2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

Record: CVE-2006-3320
Updated: 2026-11-02

EUVDEUVD-2006-3317 No score

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

Record: EUVD-2006-3317
Updated: 2026-11-03

GitHub AdvisoriesGHSA-22rq-3695-v7qm No score

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows...

Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter.

Record: GHSA-22rq-3695-v7qm
Updated: 2026-11-02

Affected products

sitebar

Affected packages

Affected packages
Package	Affected	Fixed
`sitebar` Debian:3.1	before 3.2.6-7.1, plus listed versions 3.2.6-7	3.2.6-7.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3320 is a low vulnerability (CVSS 2.6) in Sitebar, published June 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. Fixed in sitebar 3.2.6-7.1.

References

Show 9 moreShow less