Unscored CVE-2005-3494 EUVD-2005-3493GHSA-p2rv-c467-4vgq

Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a bl…

Published Nov 4, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog comment.

References

17307 third-party-advisory
1015100 vdb-entry
20051024 Fwd: Vulnerability in Ar-blog ver 5.2 and prior versions mailing-list
15201 vdb-entry