Description
Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.
References
- 20050503 Authentication bypass, sql injections and xss in ArticleLive 2005 mailing-list
- 13493 vdb-entry
- 15250 third-party-advisory
- articlelive-multiple-xss(20430) vdb-entry
- 16183 vdb-entry
- 1013895 vdb-entry