Description
Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter.
References
- 20051011 XSS vulnerability in Zeroblog mailing-list
- 17175 third-party-advisory
- 15078 vdb-entry
- http://irannetjob.com/content/view/141/28/