Unscored CVE-2006-0101 EUVD-2006-0109GHSA-vqfq-r8qm-x97f

Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web…

Published Jan 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p and (2) keyword parameters in (a) index.php and (b) search.php.

References

http://osvdb.org/ref/22/22373-sblog.txt
ADV-2006-0041 vdb-entry
22373 vdb-entry
sblog-multiple-scripts-xss(23979) vdb-entry
22374 vdb-entry