Unscored CVE-2005-3367 EUVD-2005-3366GHSA-f2vm-j44x-g834

Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML v…

Published Oct 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field.

References

15202 vdb-entry
20051025 SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all mailing-list
118 third-party-advisory