Description
Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields.
References
- eggblog-search-xss(23856) vdb-entry
- http://pridels0.blogspot.com/2005/12/eggblog-vuln.html
- 21909 vdb-entry
- 18212 third-party-advisory