Description
Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag.
References
- 1015496 vdb-entry
- microblog-functions-xss(24140) vdb-entry
- http://evuln.com/vulns/36/summary.html
- 16272 vdb-entry
- 20060117 [eVuln] microBlog BBCode XSS Vulnerability mailing-list