Description
Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.
References
- 1014386 vdb-entry
- quickblogger-xss(21244) vdb-entry
- http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt
- 15942 third-party-advisory
- ADV-2005-0987 vdb-entry
- 20050705 Quickblogger mailing-list
- 14152 vdb-entry