Description
Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.
References
- ADV-2006-0194 vdb-entry
- http://www.hackerscenter.com/archive/view.asp?id=21926
- 16243 vdb-entry
- 22448 vdb-entry
- simpleblog-comment-xss(24154) vdb-entry
- 20060114 [HSC Security Group] Multiple SQL injection/XSS in SimpleBlog 2.1 mailing-list
- 18488 third-party-advisory