Unscored CVE-2006-0333 EUVD-2006-0340GHSA-prhq-wgh2-766w

Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or…

Published Jan 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (2) year parameter to index.php.

References

arblog-index-xss(24246) vdb-entry
20060118 -2- [XSS] in ar-blog v 5.2 mailing-list
20060527 Multiple Xss exploits in ar-blog v 5.2 mailing-list