Description
Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php.
References
- 16306 vdb-entry
- saralblog-view-xss(24219) vdb-entry
- 27907 vdb-entry
- 1015517 vdb-entry
- 20060118 [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities mailing-list
- http://evuln.com/vulns/40/summary.html